e, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:20 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100007e014000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3261.450392][T26525] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3261.533039][T26525] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3261.636503][T26525] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3261.685333][T26525] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3261.698698][T26525] EXT4-fs (loop0): get root inode failed [ 3261.718395][T26525] EXT4-fs (loop0): mount failed [ 3261.732196][T26610] EXT4-fs (loop5): Invalid log cluster size: 2113929217 10:07:20 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:20 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a001fffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:21 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100007f014000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:21 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3262.369903][T26770] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3262.380166][T26770] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3262.392561][T26770] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3262.408822][T26779] EXT4-fs (loop5): Invalid log cluster size: 2130706433 [ 3262.420241][T26770] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3262.433496][T26770] EXT4-fs (loop0): get root inode failed [ 3262.440528][T26770] EXT4-fs (loop0): mount failed 10:07:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:21 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5aff1fffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3262.542731][T26836] EXT4-fs (loop5): Invalid log cluster size: 2130706433 10:07:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:21 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000080014000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3262.711750][T26899] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3262.724818][T26899] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3262.737550][T26899] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3262.762725][T26899] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3262.794452][T26899] EXT4-fs (loop0): get root inode failed [ 3262.802449][T26899] EXT4-fs (loop0): mount failed [ 3263.013108][T26912] EXT4-fs (loop5): Invalid log cluster size: 2147483649 10:07:22 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0020ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:22 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:22 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000081014000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3263.288789][T27025] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3263.326666][T27025] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3263.366990][T27025] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3263.424307][T27025] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3263.504035][T27025] EXT4-fs (loop0): get root inode failed [ 3263.553962][T27025] EXT4-fs (loop0): mount failed 10:07:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:22 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a1020ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3263.628424][T27144] EXT4-fs (loop5): Invalid log cluster size: 2164260865 10:07:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3263.786495][T27156] EXT4-fs (loop5): Invalid log cluster size: 2164260865 [ 3263.849111][T27160] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:22 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100008a014000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3263.924657][T27160] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3263.996917][T27160] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3264.057403][T27160] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3264.073099][T27160] EXT4-fs (loop0): get root inode failed [ 3264.084429][T27160] EXT4-fs (loop0): mount failed 10:07:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00000b0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:07:23 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0022ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:23 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3264.314154][T27284] EXT4-fs (loop5): Invalid log cluster size: 2315255809 10:07:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3264.379983][T27329] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3264.409319][T27329] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3264.419824][T27329] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3264.457644][T27329] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:23 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100008b014000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3264.617112][T27329] EXT4-fs (loop0): get root inode failed [ 3264.645866][T27329] EXT4-fs (loop0): mount failed 10:07:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) 10:07:23 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0124ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3264.730803][T27517] EXT4-fs (loop5): Invalid log cluster size: 2332033025 10:07:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00000c0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:07:24 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000fc014000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:24 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3265.412352][T27706] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3265.422881][T27706] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3265.433442][T27706] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3265.451423][T27745] EXT4-fs (loop5): Invalid log cluster size: 4227858433 [ 3265.459020][T27706] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3265.477388][T27706] EXT4-fs (loop0): get root inode failed [ 3265.486965][T27706] EXT4-fs (loop0): mount failed 10:07:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:24 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004024000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:24 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0025ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3265.871504][T27867] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3265.884172][T27867] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00000d0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3265.943916][T27867] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3266.021515][T27866] EXT4-fs (loop5): Invalid log cluster size: 67108865 10:07:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00') ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xd) lseek(r0, 0xd6, 0x0) [ 3266.120562][T27867] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3266.138219][T27867] EXT4-fs (loop0): get root inode failed [ 3266.148291][T27867] EXT4-fs (loop0): mount failed 10:07:25 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e9e688d35a978813c38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f49338003280cba762268e62b14b7ae78571512fc3b589f402db1c08513f0ded6e40a03a29efca39bafbf63e3e4b60fd268675326ae396833e48daee94e887af86d74dc202b0681331461d67bf873f30dc4cd3dc8ab7c59f0a259c30a06b0ec37d7759c5d6b073b3feea2a72e1af5503e259d30b98dc98d67d3354bb9f06b63a78e235189e3497a62f98bfa9e165775ec29af5ca492de44304ac33aaea65b45383b33376830b4b206bdfb97e36afff62b71c9487b7d6d0fcd07d8dc654bbc4d52f550825f34ccb1c1162dfe3d66eb159d98b130ee24a936e431c8c04bb0e28bdb0f8358be2b72aa5f42eb66279573adc6058764ced002325c0acf0029e9840d6a4b2e7924733d7d94bd0db5c901a3c1415a1ea6f4a4d15d7f91bdac94fca88c98d5a022f8439f253d76a0e23968c48b26c00c84683359d42c3c1ecf93f7118a582e4d21c59b85d50c5e0b16681f017a0658a0e195fe322fab16f51d1eeaf4a9b702ff44a9dcddcc8b531ca00dcfa3e8770ecc918bebf379925253ddea9e53d6232202d77974aa3978bd9d51ddb1417780aa16498dce71760b346bc4f38939f3deeda2551e84087a2797e00175fb1af143724d969cead04999af8ee2de0799941ca5be211d2eb379f274fecbbf2659cf97a7e27453b88f9369f2e6a01ad155ec008d086acaa7e3d20d4f2f929d3cdfaf6e95d4c8a42e9a3863a3f7de05b8e71b12", 0x1000) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r3, 0x0, 0x0, 0x10001) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000140)) fallocate(r3, 0x3, 0x5e00, 0x2cbd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fallocate(r2, 0x0, 0x0, 0x10001) sendfile(r0, r1, 0x0, 0x13000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000040)='veth0_to_team\x00') truncate(&(0x7f0000000000)='./file0\x00', 0x0) 10:07:25 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000074024000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:25 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5aeb25ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:25 executing program 1: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004024000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:25 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3266.418525][T28243] EXT4-fs (loop5): Invalid log cluster size: 1946157057 10:07:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3266.558369][T28306] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3266.565618][T28313] EXT4-fs (loop5): Invalid log cluster size: 1946157057 [ 3266.580232][T28306] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3266.591774][T28306] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3266.613678][T28306] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x80000000}, 0x16, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r1, 0x10, 0x8003, 0x8020001) open(0x0, 0x141042, 0x0) socket$unix(0x1, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r3}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) socket$tipc(0x1e, 0x0, 0x0) open(0x0, 0x0, 0x0) r6 = creat(0x0, 0x0) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x0, 0x10, r6, 0x1000, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280), 0x1033b) fdatasync(r7) r8 = creat(0x0, 0x0) write$P9_RREMOVE(r8, &(0x7f0000000280), 0x1033b) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)) r9 = creat(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r10 = creat(0x0, 0x0) dup2(r10, r9) 10:07:25 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000075024000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3266.655149][T28306] EXT4-fs (loop0): get root inode failed [ 3266.663975][T28306] EXT4-fs (loop0): mount failed 10:07:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:25 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5af625ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3266.889611][T28329] EXT4-fs (loop5): Invalid log cluster size: 1962934273 10:07:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3267.119478][T28430] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:26 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100007e024000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3267.209821][T28430] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3267.220692][T28430] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3267.246480][T28430] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3267.259287][T28430] EXT4-fs (loop0): get root inode failed [ 3267.273913][T28430] EXT4-fs (loop0): mount failed 10:07:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:26 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:26 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0427ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3267.416910][T28456] EXT4-fs (loop5): Invalid log cluster size: 2113929217 [ 3267.543160][T28469] EXT4-fs (loop5): Invalid log cluster size: 2113929217 [ 3267.557000][T28465] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3267.569948][T28465] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:26 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100007f024000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3267.604400][T28465] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x1000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4020000}, 0x24040001) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sctp\x00') setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000300)=0x6, 0x4) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f0000000180)=""/176, &(0x7f0000000100)=0xb0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x301000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000014000000731877772332f86900000000008490787f00000100000000919de81e6d27a81b30e714120e95ba22"], 0xfdef) [ 3267.692864][T28465] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3267.707823][T28465] EXT4-fs (loop0): get root inode failed [ 3267.716570][T28465] EXT4-fs (loop0): mount failed 10:07:27 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0428ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3268.180877][T28482] EXT4-fs (loop5): Invalid log cluster size: 2130706433 10:07:27 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$vfat(&(0x7f0000000400)='vfat\x00', &(0x7f0000000580)='./file0\x00', 0x8, 0x0, &(0x7f0000000280), 0x1030420, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000240)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1544c2, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/45, 0x2d}, {0x0}, {0x0}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000480)=""/147, 0x93}], 0x5, &(0x7f0000000740)=""/167, 0xa7}, 0x200}, {{&(0x7f0000000800)=@nl=@proc, 0x80, &(0x7f0000000980)=[{0x0}], 0x1}}, {{&(0x7f0000000ac0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0}}, {{&(0x7f0000000fc0)=@generic, 0x80, &(0x7f0000001380)=[{0x0}, {&(0x7f0000001240)}], 0x2, &(0x7f00000013c0)=""/44, 0x2c}, 0xfffff7fc}, {{&(0x7f0000004480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000005940)=[{&(0x7f0000004500)=""/189, 0xbd}, {&(0x7f0000004600)=""/231, 0xe7}, {0x0}, {0x0}, {&(0x7f0000005780)=""/84, 0x54}, {0x0}, {0x0}], 0x7, &(0x7f00000001c0)=""/7, 0x7}, 0x101}], 0x5, 0xf37d8d9591d4b8c8, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000005bc0)={@mcast1}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_READ(0x17, 0xd) fadvise64(r1, 0x0, 0x2000000, 0x4) [ 3268.294321][T28599] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3268.305418][T28600] EXT4-fs (loop5): Invalid log cluster size: 2130706433 [ 3268.318730][T28599] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3268.331474][T28599] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:27 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:27 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000080024000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3268.347311][T28599] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3268.350891][T28466] syz-executor.3 (28466) used greatest stack depth: 18456 bytes left 10:07:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x4, 0x0, 0x0, 0x102400, &(0x7f0000000400)=ANY=[@ANYBLOB="6464627549ff2cf7d124553f8231c81f3f252c0094350341f344471ae498c3a5a87a958a078ece46fdd2e3c07ddba9ec231d4565c3311314a4640c47f6e9dfdcbe798824200c500addd42de4c77ac151df93f870b2ed4757c411b99b328f03f7d63779ea66a420dad6f7bf2fe8ac995046a53d4b88bc5bdb232a2f3fc76e47ff8102b317e60beb8bae5cac98a1850f300ba0c060e6606929af42f45c2c2d4b0b50eadce0021db97a19b726f75e511f15d60879258ee9bd164b5aa1030cbb9868ae31294fa6c329ca3ef6a4e008f87383e8a6cf48e49f02658a3c1246efb38e6c61a134bb157616a1f7daca7f948fe83ac30a25d81bfabb7f48f57171645744aa298d3e072743ab841e74f64b2ddc819ae2fac0e8317a56938ba9e92f7120523676d1cc1a96afc639cc2339375c5a3d002b54ed00f9ea0af63843516719ce3c79047cbe0c9ddf8b11d1ffab5e17a51ab1ac10e6554cb2730575e00c8bd733ec98090d97caf1a19997d10802c565e3af1ae71192091796048aeb70739c9d61b6fd21b7d704db7bf711e7abc9e985071e52031459cc515e4c52575266e487a0661e0bbbbd778f4af32fdf4efc1fa699cdccc4c1ebc619923f936e2dd3f42ceccbc3ccd051b3a89d2f83a455a9577601390549edc7fed0f586813d614163f6a1e4f1"]) syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800) 10:07:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:27 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r0}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x80000000}, 0x16, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) timer_create(0x8, 0x0, &(0x7f0000000040)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="0721deef00008000000000000000000003965f43c4a2fb6d50840620049dada720f897f650b0d13b730f001604aa6cf7f0c2208aee57ca1999dfc1743c7e7f8cf204341d459e4331e96e29e80f5e3d21559ddc574d8d2e4752ea0c2842c3a787004af1ba9aecfd7bb7bb912c15a2fbb240cbb2027b515428529b23fe3048f89de8d61a51f58d4e7a4b5e0e3440b77bd3aafe0426867533e0e23258e59193c9764a3e10225c6f419048d99d3e238b057f00006c79f5257d0d542c45b8e7a7d1b26175387ed81e1b2751754cdf726812a6c9191d7d1b000083801fd0963ac0775b4c387b83a683d0acb4619dab435d920e4cbebe2fd184e7a46a58f38ccf628d674a21d02a2b6065df5d951bb33f1fd541561d3018012d6083902e32690800c6ab53f11638bbc17cd6cbe012000001000000a6fd6240000000000000004e98af0162e88851c48bce4cb0e056641afce2b0e6411df2faaa412189df3b3fdbd8ed66522f510300f0e258922dcf41dd93e4e09b185362c173740ec87505462e6f4f8f383ae0e3051ca03736cc81cadd9e25783cc40421357cdd7f04c8ec0a38c44651064a4e3123b287aabd8c7563ca810f5c172e770e60c04e6c14565d7f89c88c87063fb18b71ae88a7dca1d09bda796b29097edc34254b45a3f7a5630f76308398fbf73da6dea604f27065f8e09d83fa6876bd026b374640dade04c550119824b033816aa67823bfe9edfadb32dc5d8b956faa8c7af8ee611ea531e6c9"], 0x223) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x8003, 0x8020001) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) socket$unix(0x1, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) splice(r4, 0x0, r5, 0x0, 0x100000002, 0x0) write$P9_RREMOVE(r5, &(0x7f0000000340)={0x7}, 0x7) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280), 0x1033b) fdatasync(r7) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r7}) r8 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000200)) socket$tipc(0x1e, 0x2, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r9 = creat(0x0, 0x0) fdatasync(r9) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x15, 0x55f2ce6, 0x2, 0x0, 0x10, r10, 0x1000, [], 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x3c) r11 = creat(&(0x7f0000000240)='./file0\x00', 0x58) write$P9_RREMOVE(r11, &(0x7f0000000280), 0x1033b) fdatasync(r11) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r11}) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r12 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fdatasync(r12) r13 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r13, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) [ 3268.430334][T28599] EXT4-fs (loop0): get root inode failed [ 3268.468432][T28599] EXT4-fs (loop0): mount failed [ 3268.561010][T28718] EXT4-fs (loop5): Invalid log cluster size: 2147483649 10:07:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:27 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0429ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3268.703893][T28835] EXT4-fs (loop5): Invalid log cluster size: 2147483649 [ 3268.796212][T28840] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:27 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000081024000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3268.863575][T28840] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00021f0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3269.157408][T28840] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3269.231806][T28840] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3269.285566][T28856] EXT4-fs (loop5): Invalid log cluster size: 2164260865 [ 3269.301252][T28840] EXT4-fs (loop0): get root inode failed [ 3269.308399][T28840] EXT4-fs (loop0): mount failed 10:07:28 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:28 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a002effff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:28 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000aa024000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3269.579832][T28872] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3269.633033][T28872] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3269.687362][T28872] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3269.713872][T28883] EXT4-fs (loop5): Invalid log cluster size: 2852126721 [ 3269.732631][T28872] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3269.754600][T28872] EXT4-fs (loop0): get root inode failed 10:07:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x80000000}, 0x16, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x10, 0x8003, 0x8020001) open(&(0x7f0000000140)='./bus\x00', 0x141c02, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x90841, 0x0) write$P9_RREMOVE(r1, &(0x7f00000002c0)={0x48, 0x7b, 0x100}, 0x7) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x93d1}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0x7, 0x7b, 0x2}, 0x7) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r6}) socket$tipc(0x1e, 0x0, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x15, 0x55f2ce6, 0x2, 0x0, 0x10, r8, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r9, &(0x7f0000000280), 0x1033b) syz_open_dev$binderN(&(0x7f0000000540)='/dev/binder#\x00', 0x0, 0x800) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000580)='cgroup.procs\x00', 0x2, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) [ 3269.778712][T28872] EXT4-fs (loop0): mount failed [ 3269.803605][T28883] EXT4-fs (loop5): Invalid log cluster size: 2852126721 10:07:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:28 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000034000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:28 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0337ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3270.155885][T29008] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3270.180748][T29006] EXT4-fs (loop5): #blocks per group too big: 16387 [ 3270.198338][T29008] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3270.238458][T29008] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3270.279872][T29008] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:29 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x8902) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="6ff7f0cfc93d710d4e4a15ca8a66ebc2910faf5df71de6514fe038c8a194f29418b3179c35f7114a369cfaa9a296989d8175b89f967afd3d7696874599ef50c890761a", &(0x7f00000000c0)="317b39c4dbb8f297a6f96eaeedaea9b234ecb5a4a00215eafbad900c1a2123da8038c8581cd52dbf8c8373d71f39f95b89f7e55e8bf2eafc257d316b3d919b3eed4586640ad0b4081656d83e776ad5c9256315e0217bd9c4209200fb3d6730ce4007c9a435731e", 0x2}, 0x20) ioctl$USBDEVFS_RESET(r0, 0x5514) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), 0x4) 10:07:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3270.321850][T29008] EXT4-fs (loop0): get root inode failed [ 3270.333363][T29008] EXT4-fs (loop0): mount failed [ 3270.333374][T29016] EXT4-fs (loop5): #blocks per group too big: 16387 10:07:29 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000037034000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3270.421932][T29027] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.1' resets device 10:07:29 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0338ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd5}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x94000, 0xc6) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) prctl$PR_GET_DUMPABLE(0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00022dbd7000ffdbdf2507000000060028000200000008003a003bf4de62"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) [ 3270.822614][T29148] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3270.839919][T29148] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3270.851267][T29148] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3270.866735][T29153] EXT4-fs (loop5): Invalid log cluster size: 922746881 [ 3270.963582][T29148] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3270.999649][T29148] EXT4-fs (loop0): get root inode failed [ 3271.008756][T29148] EXT4-fs (loop0): mount failed 10:07:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:30 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000038034000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:30 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a003fffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:30 executing program 1: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0338ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:30 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:30 executing program 1: clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0301000000000000020000000000ee000000fb6c00000000480000000000"}, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 3271.376008][T29277] SELinux: failed to load policy [ 3271.399933][T29269] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0001300000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3271.463700][T29269] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x44) gettid() timer_create(0x8, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000040)) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x3, r1, 0x0, 0xffffffffffffffdb) keyctl$set_timeout(0xf, r1, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)='$.6/%cpuset]\x00', r1) keyctl$setperm(0x5, r1, 0x40000) accept4$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10, 0x80000) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$binfmt_elf32(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="d1fe526fd5fd31808f8c4cefae09"], 0x1) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r3) write$FUSE_LSEEK(r2, &(0x7f0000000580)={0x18, 0x0, 0x6, {0x800}}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f0000000880)=ANY=[@ANYBLOB], 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = creat(&(0x7f00000004c0)='./file1\x00', 0x105) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000500)={0x3, 0x21, 0x16, 0x6, 0xa, 0x400, 0x0, 0x3}) r6 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) ftruncate(r6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000200)={0xfff, 0x40}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x4, 0xd, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0xb}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x20000}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x4d2, 0x3c}, 0x0, @in=@empty, 0x20, 0x4, 0x0, 0x1}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000540)=[{r8, 0x22f5}], 0x1, &(0x7f00000005c0), &(0x7f0000000600)={[0x3ff]}, 0x8) sendmmsg(r7, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3271.555737][T29269] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3271.565846][T29280] EXT4-fs (loop5): Invalid log cluster size: 939524097 10:07:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3271.613580][T29269] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3271.645391][T29269] EXT4-fs (loop0): get root inode failed [ 3271.651171][T29269] EXT4-fs (loop0): mount failed 10:07:30 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5afb3fffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:30 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000002044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3272.139270][T29506] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3272.149353][T29506] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3272.159409][T29506] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3272.170213][T29506] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3272.183191][T29506] EXT4-fs (loop0): get root inode failed 10:07:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3272.191113][T29506] EXT4-fs (loop0): mount failed 10:07:31 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) dup(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(r2, &(0x7f0000000200)={@void, @val, @mpls={[], @ipv4=@icmp={{0x6, 0x6, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote, {[@lsrr={0x83, 0x1}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, @multicast2, @broadcast}}}}}, 0x3e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) clone(0x40021000, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r6 = getpid() prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) sched_setattr(r6, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 10:07:31 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5aff3fffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3272.236576][T29508] EXT4-fs (loop5): Invalid log cluster size: 33554433 10:07:31 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0002380000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3272.397155][T29538] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3272.411794][T29527] EXT4-fs (loop5): Invalid log cluster size: 33554433 [ 3272.420149][T29538] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3272.430955][T29538] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:31 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000006044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3272.458420][T29538] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3272.471209][T29538] EXT4-fs (loop0): get root inode failed [ 3272.485971][T29538] EXT4-fs (loop0): mount failed 10:07:31 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0040ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00033a0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3272.727994][T29656] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3272.790801][T29657] EXT4-fs (loop5): Invalid log cluster size: 100663297 10:07:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3272.892919][T29656] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3272.962782][T29656] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:31 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000010044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:32 executing program 1: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000006044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3273.084207][T29656] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3273.097849][T29656] EXT4-fs (loop0): get root inode failed [ 3273.103856][T29656] EXT4-fs (loop0): mount failed 10:07:32 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0048ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:32 executing program 1: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5afb3fffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3273.175514][T29680] EXT4-fs (loop5): Invalid log cluster size: 268435457 10:07:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:32 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3273.317344][T29689] EXT4-fs (loop5): Invalid log cluster size: 268435457 [ 3273.325014][T29693] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:32 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000028044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3273.383861][T29693] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3273.407710][T29693] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3273.583234][T29693] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:32 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x100000002, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r8) splice(r7, 0x0, r8, 0x0, 0x100000002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000340)={0x0, 0x5, 0x8, 0x80, 0x8000}, 0x14) readahead(r6, 0x2, 0x3206) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000001700)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYBLOB="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", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08000100ffff0c009900010000000200000000000000"], 0x5}, 0x1, 0x0, 0x0, 0x10002}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r9, @ANYBLOB="00022dbd7000fcdbdf254b00000074007d8070000300311f5f61ff762d496103d5509e9eecf4b91cdb83cff57c9da565a9be1460522a94355d380e3e5166304a87e523a70673b827c0ac3bee8329eadd97f73e23959a987cd15fb4f7500e89b61da9d77ebdb81954b49458ddbe814b72d99b270e09262094186b612c3b7e427f832f44002c80080000000100008008000000970a000008000000020000000800000005000000087c0000ff7f0000080000000100008008000000040000000800000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x400c4}, 0x4000000) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r10 = request_key(&(0x7f0000000500)='cifs.spnego\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)='nl80211\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="9342b5f0b2159bf21df86bba52f6ce57cc8b4f2f147d6fcd78d673ee744ad87b233add931c44f972e7b1f32d7804bab3b4173ce4f9a435afa8df95e5ed169a827fc11658bbe46abb50884de599441245dc7b", 0x52, r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r12) splice(r11, 0x0, r12, 0x0, 0x100000002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f0000000600)={0x401, 0x32, 0x8001, 0x3, 0x7fffffff}, 0x14) ioctl$TIOCCBRK(r11, 0x5428) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="9500000000000000a49050000000000018270000", @ANYRES32=r0, @ANYBLOB="00000000f3e41b80ab0e037327a5fab8ff0000008500000072000000", @ANYRES32=r1, @ANYBLOB="000000000008000018000000060000000000000001010000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x78) [ 3273.625527][T29693] EXT4-fs (loop0): get root inode failed [ 3273.646286][T29693] EXT4-fs (loop0): mount failed [ 3273.759953][T29718] EXT4-fs (loop5): Invalid log cluster size: 671088641 10:07:32 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a004cffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:32 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000029044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:33 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(&(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x5f, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x78) r0 = gettid() tkill(r0, 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) r2 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r2, 0x0, 0x0) [ 3274.137005][T29842] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3274.157516][T29842] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3274.170693][T29842] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3274.183451][T29841] EXT4-fs (loop5): Invalid log cluster size: 687865857 [ 3274.200849][T29842] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x50, 0x8}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f1383ca072b4515e297ec2765bd2464e588fce98810586be14003c84329a9fd5ff5223fdcd023f73220bd40d95690999f18ba6cb8547e75ff8e6526e380859df62aeaf97b8341e430fb11ee8628d25e6cfcdb6b336c2dfb2dbecdd1f338a277dfaf3277483c8f22d0ba05665f9454e34484626e30bf48ad781c3f95829b68c5ce250bad8f962f2e780abe0bb31c88beede8c72bd1b96f49348"], 0x15) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e21, 0x4, @rand_addr="e5d92a808a5c88b0cc71b86edd386a0a", 0x7}}, 0x0, 0x0, 0x34, 0x0, "290dcf4af2233d41e51d05617253699b2ee0faa618d6e9a14c79d59f7ff8cb93547243f8bdf13bab8d8171e9e40936b27f2936371ed36ca6b2b8f8afe1529412db709c547b353dd8aa8b2ef60ebe6b10"}, 0xd8) sendfile(r4, r3, 0x0, 0xa198) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) splice(r6, 0x0, r7, 0x0, 0x100000002, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000004c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(r6, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {r10, r11/1000+10000}}) [ 3274.232060][T29842] EXT4-fs (loop0): get root inode failed [ 3274.247759][T29842] EXT4-fs (loop0): mount failed 10:07:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:33 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0157ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:33 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3274.316232][T29855] EXT4-fs (loop5): Invalid log cluster size: 687865857 10:07:33 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000054044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) splice(r5, 0x0, r6, 0x0, 0x100000002, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) lchown(&(0x7f0000000040)='./file0\x00', 0x0, r9) write$FUSE_ATTR(r5, &(0x7f0000000300)={0x78, 0x0, 0x3, {0x1f, 0x6, 0x0, {0x5, 0x800, 0x3f, 0x7fff, 0x9, 0xff, 0x5, 0x3, 0xffff7fff, 0x0, 0x2, r7, r9, 0xfffff365, 0x7a70}}}, 0x78) inotify_rm_watch(r3, r4) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/59, 0x3b) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r12) splice(r11, 0x0, r12, 0x0, 0x100000002, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r11, 0x65, 0x5, &(0x7f0000000380)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)={0x3, 'hsr0\x00', {0x7fff}}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010000507000000745d3b892cbd08cb00", @ANYRES32=r13, @ANYBLOB="0200120008000100736974000c0002000800030000d3de6bdb5e079715000000000000000000000000662ece65869da67e68eb0600dde0c616fe8dd179b43b43d9", @ANYRES32], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28}]}]}]}, 0x50}}, 0x0) 10:07:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3274.522249][T29968] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3274.534708][T29968] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3274.553640][T29968] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3274.565761][T29968] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3274.579299][T29968] EXT4-fs (loop0): get root inode failed [ 3274.597178][T29968] EXT4-fs (loop0): mount failed 10:07:33 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0060ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:33 executing program 1: getcwd(&(0x7f00000004c0)=""/104, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000001040)) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000340)={@local, 0x80000000, 0x2, 0x0, 0x2}, &(0x7f0000000380)=0x20) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c65302020e98e0715eae91a90cafb0a9397214feac7da0f1ad732364b8f22fa98e3b6e989a7cd6c6fddaf5888f041d4a3b1043b5d721b3c365e0a2b4305349a02bdcb7dbb9fef608c0501072ab1baea2ba94db36a68ec859591b73749b6270d1cc3440979564e77160d95841740ba63c7db70a749267169fca7d0cbf50000504c870f0c80060d3691930cf4ad0cd302780eb07d2095c83eaeedf9ea9610749acd272a9aa07ede61be7f4bd8788ec96ddee7c4643b3b18ee488c45e2536f524ae6b1f2ecdca695acdc2d340f687fe9e7a787bb5299bea2ead18c6ff28deb636b2e020aaed1a51561a5aff6fb1aa677796fb1e43c47abd2e86962658275287dde82c05dd4a8dd58a786035477f01da79c4269b93ff3ad1baaa8f1161af4a4ec71ebdf99139cd120b342c3e61a37a7d072f688648253b7846d13080ded84fa20a43dd8e2c62eef4127b1f227e2ccbae394018516c5ef2da0fbb65575a9e8073e3cf912dc01ea8bdedd3f43df3715619c05205f48d8d4b83fdee945ffc8bf2cdad7f8f6eb693d0058aebc104fcbbaf173824ffa5bf3cc3146882493a4810ef2486ad9bab893ccbdab52923a9388a854"], 0x86) write(r3, &(0x7f0000000340), 0x41395527) timer_create(0x2, &(0x7f0000000340)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000d43000)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0x2002, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x2) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78601553f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) pipe(&(0x7f00000003c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/schedstat\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='attr/prev\x00') [ 3274.688550][T29974] EXT4-fs (loop5): Invalid log cluster size: 1409286145 10:07:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00014c0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:07:33 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x50d}}]}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000000000000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010841) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0xffffffd5}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) 10:07:34 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000055044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:34 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x50d}}]}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000000000000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010841) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0xffffffd5}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) 10:07:34 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$TUNSETFILTEREBPF(r2, 0x6609, 0x0) [ 3275.212129][T30200] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3275.225123][T30200] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3275.237141][T30200] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3275.282241][T30200] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3275.298874][T30200] EXT4-fs (loop0): get root inode failed [ 3275.307355][T30313] EXT4-fs (loop5): Invalid log cluster size: 1426063361 10:07:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:34 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3275.334868][T30200] EXT4-fs (loop0): mount failed 10:07:34 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:34 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0068ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0002500000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3275.505937][T30429] EXT4-fs (loop5): Invalid log cluster size: 1426063361 10:07:34 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000056044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:34 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3275.665470][T30545] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3275.708579][T30545] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3275.728225][T30545] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3275.926218][T30545] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3276.077219][T30545] EXT4-fs (loop0): get root inode failed [ 3276.083172][T30545] EXT4-fs (loop0): mount failed 10:07:35 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a006cffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3276.158018][T30554] EXT4-fs (loop5): Invalid log cluster size: 1442840577 10:07:35 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3276.310333][T30670] EXT4-fs (loop5): Invalid log cluster size: 1442840577 [ 3276.334266][T30676] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:35 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3276.351079][T30676] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3276.414906][T30676] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:35 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000057044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3276.485311][T30676] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3276.507179][T30676] EXT4-fs (loop0): get root inode failed [ 3276.513639][T30676] EXT4-fs (loop0): mount failed 10:07:35 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0273ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:35 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3277.034013][T30804] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3277.057269][T30801] EXT4-fs (loop5): Invalid log cluster size: 1459617793 [ 3277.068313][T30804] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3277.079949][T30804] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3277.103125][T30804] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3277.117982][T30804] EXT4-fs (loop0): get root inode failed [ 3277.149238][T30804] EXT4-fs (loop0): mount failed 10:07:36 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0074ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3277.249163][T30801] EXT4-fs (loop5): Invalid log cluster size: 1459617793 10:07:36 executing program 1: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0068ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:36 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000058044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:36 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3277.430674][T30927] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3277.469683][T30927] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3277.653473][T30927] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3277.698012][T30935] EXT4-fs (loop5): Invalid log cluster size: 1476395009 [ 3277.762555][T30927] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3277.795871][T30927] EXT4-fs (loop0): get root inode failed [ 3277.855603][T30927] EXT4-fs (loop0): mount failed 10:07:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:36 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000059044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:37 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a007affff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3278.184794][T31162] EXT4-fs (loop5): Invalid log cluster size: 1493172225 10:07:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:37 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000004280)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/184, 0xb8}], 0x2, &(0x7f00000002c0)=""/134, 0x86}, 0x9}, {{&(0x7f00000003c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f00000004c0)=""/235, 0xeb}, 0x9}, {{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f0000001880)=[{&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/221, 0xdd}, {&(0x7f00000007c0)=""/66, 0x42}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/29, 0x1d}], 0x5, &(0x7f0000001900)=""/240, 0xf0}, 0x6}, {{&(0x7f0000001a00)=@phonet, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1, &(0x7f0000002ac0)=""/52, 0x34}, 0x1}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000002b00)=""/36, 0x24}, {&(0x7f0000002b40)=""/15, 0xf}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/56, 0x38}, {&(0x7f0000003bc0)=""/151, 0x97}], 0x5, &(0x7f0000003d00)=""/33, 0x21}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003d40)=""/56, 0x38}, {&(0x7f0000003d80)=""/4, 0x4}, {&(0x7f0000003dc0)=""/113, 0x71}, {&(0x7f0000003e40)=""/18, 0x12}], 0x4}, 0x1f0b}, {{&(0x7f0000003ec0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000004180)=[{&(0x7f0000003f40)=""/75, 0x4b}, {&(0x7f0000003fc0)=""/143, 0x8f}, {&(0x7f0000004080)=""/107, 0x6b}, {&(0x7f0000004100)=""/107, 0x6b}], 0x4, &(0x7f00000041c0)=""/166, 0xa6}, 0x400}], 0x7, 0x40002063, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/current\x00') sendfile(r1, r1, 0x0, 0x24) [ 3278.306251][T31168] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3278.320432][T31168] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3278.332830][T31176] EXT4-fs (loop5): Invalid log cluster size: 1493172225 [ 3278.342114][T31168] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3278.365493][T31168] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:37 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100005a044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:37 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3278.566638][T31168] EXT4-fs (loop0): get root inode failed [ 3278.574693][T31168] EXT4-fs (loop0): mount failed 10:07:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:37 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3278.725358][T31315] EXT4-fs (loop5): Invalid log cluster size: 1509949441 10:07:37 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a017effff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3278.880572][T31401] EXT4-fs (loop5): Invalid log cluster size: 1509949441 10:07:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:37 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100005b044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3279.049600][T31408] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3279.059942][T31408] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3279.246482][T31408] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3279.325848][T31514] EXT4-fs (loop5): Invalid log cluster size: 1526726657 [ 3279.378177][T31408] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x200}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6888f98fca4acb06cc0962894e124e96f44f874cc2481516acc2cab7220b9934c32449402cea6724cb3b301456ab3d8566e4f0bee54b73ce79ed5d420f3e4b9b6c5358608ebc39627d24f250dcfef001e6d9486af6a47e029bcb132057882eda7175246a046ec575ed0a6013000149dc25712192e6989b04dc43792957d1e074a9aa74f80a1248a558b96e3ff070f7bcc40bc7802edba70c1dad6284ea36839a8d78c68390ee7a3c2db5d43a8a48ba1829cb10bf6f8ef380a33d4befb5fa2d4852575e7592bee552f46d0286cf416e51c8", @ANYRES16=0x0, @ANYBLOB="04002b5025010000000800010080000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0xc05fa8a8a6fc04d2) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r6, &(0x7f0000000000), 0x1c) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000100)=0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r9) splice(r8, 0x0, r9, 0x0, 0x100000002, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'team_slave_0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="4400000007000000076c1f279334271fffffffff9361b50e8f7cfe8900010000fb650d058b51eaa2eadb9ae942a977010377dac8b2167a5a11103680f356f52ad12144401fbe0b8c4d84bfa6996c0f28fc4b6e598e7298f257f1060170b5eb51763c15cd39d619e0b761b1c40643916619c4e28f45ac370178d297890972509314eb0fd139c18007a6b5ec8c0126fe2db5f7f2bd7e4f6e3e75fd1caef9b36c6b95739099a00e5ab88f2833eaaed5753209ab00da1bde22ee02c709c29f722ae70c710ced1364be45fd2f090a0d8c9f61e5599281d942f692be1dc395f47ba401d55ac921"]}) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000240)={@rand_addr="45c14b5cdb507f5ab89d9bfde50c8f0c", 0x1, 0x1, 0xff, 0x8, 0x9, 0x1f}, 0x20) r11 = dup(r6) r12 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r12, 0x2007fff) sendfile(r11, r12, 0x0, 0x8000fffffffe) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000002c0)={[0x6c]}, &(0x7f0000000380), &(0x7f0000000400)={r13, r14+10000000}, 0x8) 10:07:38 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:38 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100005c044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3279.599272][T31408] EXT4-fs (loop0): get root inode failed [ 3279.606023][T31408] EXT4-fs (loop0): mount failed 10:07:38 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r0}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x80000000}, 0x16, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) timer_create(0x8, 0x0, &(0x7f0000000040)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0721deef00008000000000000000000003965f43c4a2fb6d50840620049dada720f897f650b0d13b730f001604aa6cf7f0c2208aee57ca1999dfc1743c7e7f8cf204341d459e4331e96e29e80f5e3d21559ddc574d8d2e4752ea0c2842c3a787004af1ba9aecfd7bb7bb912c15a2fbb240cbb2027b515428529b23fe3048f89de8d61a51f58d4e7a4b5e0e3440b77bd3aafe0426867533e0e23258e59193c9764a3e1022696f419048d99f3e238b057f00006c79f5257d0d542c45b8e7a7d1b26175387ed81e1b2751754cdf726812a6c9191d7d1b000083801fd0963ac0775b4c3c7b83a683d0acb4619dab435d920e4cbebe2fd184e7a46a58f38ccf628d674a21d02a2b6065df5d951bb33f1fd541561d3018012d6083902e32690800c6ab53f11638bbc17cd6cbe0120000000000a6fd6240000000000000004e98af0162e88851c48bce4cb0e056641afce2b0e6411df2faaa412189df3b3fdbd8ed66522f510300f0e258922dcf41dd93e4e09b185362c173740ec87505462e6f4f8f383ae0e3051ca03736cc81cadd9e25783cc40421357cdd7f04c8ec0a38c44651064a4e3123b287aabd8c7563ca810f5c172e770e60c04e6c14565d7f89c88c87063fb18b71ae88a7dca1d09bda796b29097edc34254b45a3f7a5630f76308398fbf73da6dea604f27065f8e09d83fa6876bd026b374640dade04c550119824b0af298119c905e103edfadb32dc5d8b956faa8c7af8ee611ea531e6c9f2627d2982d2fc592189b13fd49ca4896d3248a2f9693d71474ef09aa578109ab769ff355da15422265e3d2b84462d322ce539187b87a8779d3d9cf7cee83d9d74fe1ea6829ea579c747d3249d2ada702f204a8f5fc4185921accba6beda692503b2800997ca1fc456a962c656e292df09bee72f00a6556a954156d36f3fe225971521970b8ecd5ecb821738fca83274ac85fcd958ae637595704cd2675b6bd492637842b691bf0b20160577fff25be0d221b15459e88695b1be08ac097b712fdb17bc"], 0x223) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x8003, 0x8020001) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) socket$unix(0x1, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r7, 0x0, 0x0) fdatasync(r7) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r7}) socket$tipc(0x1e, 0x2, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r8 = creat(0x0, 0x0) fdatasync(r8) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x15, 0x55f2ce6, 0x2, 0x0, 0x10, r9, 0x1000, [], 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x3c) r10 = creat(&(0x7f0000000240)='./file0\x00', 0x58) write$P9_RREMOVE(r10, &(0x7f0000000280), 0x1033b) fdatasync(r10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r10}) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r11 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fdatasync(r11) creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r11, &(0x7f00000002c0), 0xffffffffffffff71) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 10:07:38 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0281ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3279.802677][T31628] EXT4-fs (loop5): Invalid log cluster size: 1543503873 10:07:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3279.968671][T31652] EXT4-fs (loop5): Invalid log cluster size: 1543503873 10:07:39 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100005d044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3280.269344][T31761] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3280.280865][T31761] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3280.294427][T31761] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3280.312253][T31761] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3280.328523][T31761] EXT4-fs (loop0): get root inode failed [ 3280.334776][T31761] EXT4-fs (loop0): mount failed 10:07:39 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0484ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3280.504492][T31771] EXT4-fs (loop5): Invalid log cluster size: 1560281089 10:07:39 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:39 executing program 1: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/167, 0xa7) clock_gettime(0x0, 0x0) setitimer(0x0, &(0x7f0000000240)={{0x0, 0x2710}}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[]}}, 0x4000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x19, 0x0, 0x0, 0x8, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r2, 0x0, r4) setgroups(0x3, &(0x7f0000000180)=[0x0, r4, 0x0]) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x802, 0x0) write$P9_RLOPEN(r5, &(0x7f0000005940)={0x18}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) unshare(0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) [ 3280.718987][T31785] EXT4-fs (loop5): Invalid log cluster size: 1560281089 [ 3280.745345][T31787] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3280.799825][T31787] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3280.815518][T31787] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:39 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100005e044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3280.849798][T31787] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:39 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3280.901389][T31787] EXT4-fs (loop0): get root inode failed [ 3280.914884][T31787] EXT4-fs (loop0): mount failed 10:07:39 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a018cffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3281.094884][T31910] EXT4-fs (loop5): Invalid log cluster size: 1577058305 10:07:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3281.162315][T31915] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3281.185595][T31915] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3281.213290][T31915] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3281.227539][T31910] EXT4-fs (loop5): Invalid log cluster size: 1577058305 [ 3281.246416][T31915] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:40 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c08800000000000010000000100005f044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3281.260300][T31915] EXT4-fs (loop0): get root inode failed [ 3281.280446][T31915] EXT4-fs (loop0): mount failed 10:07:40 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a048fffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3281.563357][T31937] EXT4-fs (loop5): Invalid log cluster size: 1593835521 [ 3281.717566][T31948] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3281.733929][T31948] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3281.744710][T31952] EXT4-fs (loop5): Invalid log cluster size: 1593835521 [ 3281.762018][T31948] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3281.802483][T31948] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3281.828566][T31948] EXT4-fs (loop0): get root inode failed [ 3281.834527][T31948] EXT4-fs (loop0): mount failed 10:07:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0002670000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:07:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:40 executing program 1: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/167, 0xa7) clock_gettime(0x0, 0x0) setitimer(0x0, &(0x7f0000000240)={{0x0, 0x2710}}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[]}}, 0x4000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x19, 0x0, 0x0, 0x8, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r2, 0x0, r4) setgroups(0x3, &(0x7f0000000180)=[0x0, r4, 0x0]) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x802, 0x0) write$P9_RLOPEN(r5, &(0x7f0000005940)={0x18}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) unshare(0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) 10:07:40 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000060044000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:40 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0490ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3282.014335][T31973] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3282.034218][T31971] EXT4-fs (loop5): Invalid log cluster size: 1610612737 [ 3282.053231][T31973] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3282.066670][T31973] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3282.092323][T31973] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:41 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3282.114263][T31973] EXT4-fs (loop0): get root inode failed [ 3282.184468][T31973] EXT4-fs (loop0): mount failed [ 3282.203755][T31982] EXT4-fs (loop5): Invalid log cluster size: 1610612737 10:07:41 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a02a8ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:41 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000054000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3282.608678][T32100] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3282.622439][T32100] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3282.638222][T32100] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3282.707550][T32100] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3282.736968][T32100] EXT4-fs (loop0): get root inode failed [ 3282.764438][T32100] EXT4-fs (loop0): mount failed [ 3282.772700][T32108] EXT4-fs (loop5): #blocks per group too big: 16389 [ 3282.963468][T32119] EXT4-fs (loop5): #blocks per group too big: 16389 10:07:43 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:43 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a01e4ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:43 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000064000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:43 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3284.533633][T32137] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3284.767353][T32140] EXT4-fs (loop5): #blocks per group too big: 16390 10:07:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3284.910830][T32137] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3284.964924][T32137] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3284.986327][T32137] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3285.006213][T32137] EXT4-fs (loop0): get root inode failed 10:07:43 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004064000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:43 executing program 1: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a018cffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3285.012552][T32137] EXT4-fs (loop0): mount failed 10:07:43 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:44 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a25ebffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:44 executing program 1: clock_gettime(0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac11, 0xfac02, 0xfac05, 0xfac08, 0xfac0b]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0xc5) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) unshare(0x40000000) 10:07:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:44 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3285.299357][T32269] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3285.480872][T32285] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3285.551531][T32285] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:44 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000074000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3285.669017][T32285] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3285.806147][T32285] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3285.866726][T32407] EXT4-fs (loop5): #blocks per group too big: 16391 [ 3285.871936][T32285] EXT4-fs (loop0): get root inode failed [ 3285.908913][T32285] EXT4-fs (loop0): mount failed 10:07:44 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000094000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:44 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5afff0ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3286.148343][T32420] EXT4-fs (loop5): #blocks per group too big: 16393 10:07:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:45 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3286.265191][T32426] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3286.285413][T32426] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3286.302005][T32426] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3286.323971][T32426] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3286.346891][T32426] EXT4-fs (loop0): get root inode failed [ 3286.369471][T32426] EXT4-fs (loop0): mount failed 10:07:45 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) syz_open_procfs(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) fadvise64(r0, 0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(0xffffffffffffffff, r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x7e, &(0x7f0000000300)=""/126, 0x41100, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x7}, 0x10, r7}, 0x78) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 10:07:45 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000000a4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:45 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a25f6ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3286.670249][T32456] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3286.681315][T32456] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3286.692194][T32456] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3286.708648][T32455] EXT4-fs (loop5): #blocks per group too big: 16394 [ 3286.729040][T32456] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:45 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x1a}, [@map, @map={0x18, 0xa}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x74, &(0x7f0000000340)=""/116, 0x0, 0x0, [], 0x0, 0xa80a2c3935037295, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3f}, 0x10}, 0x78) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r1) sendfile(r3, r4, 0x0, 0x8400fffffffa) [ 3286.829319][T32456] EXT4-fs (loop0): get root inode failed [ 3286.856770][T32456] EXT4-fs (loop0): mount failed 10:07:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000740000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3286.911988][T32567] EXT4-fs (loop5): #blocks per group too big: 16394 10:07:45 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a3ffbffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:45 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000000b4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3287.134800][T32579] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3287.149173][T32579] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3287.285690][T32579] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3287.490409][T32586] EXT4-fs (loop5): #blocks per group too big: 16395 [ 3287.515990][T32579] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3287.532270][T32579] EXT4-fs (loop0): get root inode failed [ 3287.541694][T32579] EXT4-fs (loop0): mount failed 10:07:46 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:46 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a07ffffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3287.640664][T32600] EXT4-fs (loop5): #blocks per group too big: 16395 10:07:46 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x1a}, [@map, @map={0x18, 0xa}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x74, &(0x7f0000000340)=""/116, 0x0, 0x0, [], 0x0, 0xa80a2c3935037295, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3f}, 0x10}, 0x78) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r1) sendfile(r3, r4, 0x0, 0x8400fffffffa) 10:07:46 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000000c4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:46 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3287.745378][T32669] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3287.762949][T32669] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3287.774942][T32669] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3287.802670][T32669] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3287.831850][T32669] EXT4-fs (loop0): get root inode failed [ 3287.869984][T32669] EXT4-fs (loop0): mount failed 10:07:46 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0fffffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3288.118467][T32738] EXT4-fs (loop5): #blocks per group too big: 16396 10:07:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3288.251036][T32746] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3288.296536][T32746] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3288.326650][T32746] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3288.356300][T32746] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3288.370047][T32738] EXT4-fs (loop5): #blocks per group too big: 16396 [ 3288.378179][T32746] EXT4-fs (loop0): get root inode failed [ 3288.384535][T32746] EXT4-fs (loop0): mount failed 10:07:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:47 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000000d4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:47 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a1fffffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3288.581787][ T301] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3288.614627][ T301] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:47 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x1a}, [@map, @map={0x18, 0xa}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x74, &(0x7f0000000340)=""/116, 0x0, 0x0, [], 0x0, 0xa80a2c3935037295, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3f}, 0x10}, 0x78) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r1) sendfile(r3, r4, 0x0, 0x8400fffffffa) 10:07:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00037b0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3288.630549][T32767] EXT4-fs (loop5): #blocks per group too big: 16397 [ 3288.647991][ T301] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3288.669591][ T301] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3288.711005][ T301] EXT4-fs (loop0): get root inode failed [ 3288.734501][ T301] EXT4-fs (loop0): mount failed 10:07:47 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3288.765941][ T308] EXT4-fs (loop5): #blocks per group too big: 16397 10:07:47 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a3fffffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:47 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000000e4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00007c0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:07:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3289.017231][ T325] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3289.040403][ T325] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3289.078004][ T333] EXT4-fs (loop5): #blocks per group too big: 16398 [ 3289.103695][ T325] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3289.142434][ T325] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3289.155915][ T325] EXT4-fs (loop0): get root inode failed [ 3289.162456][ T325] EXT4-fs (loop0): mount failed 10:07:48 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004104000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:48 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5af0ffffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3289.444979][ T365] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3289.469455][ T365] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3289.486986][ T365] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3289.507712][ T364] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3289.546196][ T365] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:48 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x1a}, [@map, @map={0x18, 0xa}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x74, &(0x7f0000000340)=""/116, 0x0, 0x0, [], 0x0, 0xa80a2c3935037295, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3f}, 0x10}, 0x78) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r1) sendfile(r3, r4, 0x0, 0x8400fffffffa) [ 3289.601046][ T365] EXT4-fs (loop0): get root inode failed [ 3289.615191][ T365] EXT4-fs (loop0): mount failed 10:07:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:48 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000020104000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:48 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0002ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:48 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3289.924195][ T497] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3289.976558][ T501] EXT4-fs (loop5): Invalid log cluster size: 536870913 [ 3289.987947][ T497] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:48 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3290.027514][ T497] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3290.050063][ T497] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3290.063864][ T497] EXT4-fs (loop0): get root inode failed [ 3290.077045][ T497] EXT4-fs (loop0): mount failed [ 3290.123921][ T520] EXT4-fs (loop5): Invalid log cluster size: 536870913 10:07:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:49 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0003ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:49 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000114000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3290.370474][ T639] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:49 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3290.420898][ T639] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3290.462381][ T639] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3290.490589][ T643] EXT4-fs (loop5): #blocks per group too big: 16401 [ 3290.499683][ T639] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3290.546763][ T639] EXT4-fs (loop0): get root inode failed [ 3290.553535][ T639] EXT4-fs (loop0): mount failed 10:07:49 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0004ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:49 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000124000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:49 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:49 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3290.989594][ T772] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3291.008620][ T772] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3291.025221][ T784] EXT4-fs (loop5): #blocks per group too big: 16402 [ 3291.028017][ T772] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3291.064928][ T772] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3291.077899][ T772] EXT4-fs (loop0): get root inode failed [ 3291.084815][ T772] EXT4-fs (loop0): mount failed 10:07:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:50 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0005ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3291.226232][ T784] EXT4-fs (loop5): #blocks per group too big: 16402 10:07:50 executing program 1: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000114000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:50 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000001b4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:50 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x7e0d, 0x4, 0x418, 0x220, 0x220, 0x330, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @remote, @remote, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="133a078a8218", @empty, @rand_addr, @dev={0xac, 0x14, 0x14, 0xff}, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @dev, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) [ 3291.555570][ T913] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3291.573530][ T919] EXT4-fs (loop5): #blocks per group too big: 16411 10:07:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3291.626382][ T913] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3291.668862][ T913] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3291.785539][ T913] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3291.805298][ T1029] EXT4-fs (loop5): #blocks per group too big: 16411 [ 3291.812381][ T913] EXT4-fs (loop0): get root inode failed [ 3291.819196][ T913] EXT4-fs (loop0): mount failed 10:07:50 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x0, @empty}, 0x44, 0x0, 0x2, 0x46a, 0x4}) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x402c1, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) setsockopt$inet_mreqn(r4, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) splice(r5, 0x0, r6, 0x0, 0x100000002, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0xa1) openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f0000000000)={0x5, 0x0, 0x4}) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r9 = accept$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) sendto$inet6(r9, 0x0, 0x0, 0x20004084, 0x0, 0x0) creat(0x0, 0x0) 10:07:50 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000ff1f4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:50 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:50 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0006ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:50 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3292.012339][ T1049] EXT4-fs (loop5): Invalid log cluster size: 4278190081 10:07:50 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:50 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90692, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RFSYNC(r4, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r5 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x208200) sendfile(r0, r5, 0x0, 0x8000fffffffe) 10:07:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00018e0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:07:51 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200007ff}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xc4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x7fffffff, 0x1ce, 0x1f}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000000c0)=0x0) ptrace$peekuser(0x3, r7, 0x7) r8 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="eab004", @ANYRES32], 0x2}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 3292.168140][ T1058] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3292.186392][ T1174] EXT4-fs (loop5): Invalid log cluster size: 4278190081 [ 3292.229392][ T1058] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:51 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3292.271314][ T1058] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3292.303532][ T1058] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3292.316143][ T1058] EXT4-fs (loop0): get root inode failed [ 3292.321914][ T1058] EXT4-fs (loop0): mount failed 10:07:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:51 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000204000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:51 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0007ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0001940000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3292.691855][ T1303] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3292.702107][ T1303] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3292.713696][ T1303] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3292.732375][ T1305] EXT4-fs (loop5): #blocks per group too big: 16416 [ 3292.737955][ T1303] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3292.753293][ T1303] EXT4-fs (loop0): get root inode failed [ 3292.765586][ T1303] EXT4-fs (loop0): mount failed 10:07:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:51 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0008ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:51 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000010204000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0003970000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3293.180365][ T1330] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3293.194307][ T1332] EXT4-fs (loop5): Invalid log cluster size: 268435457 10:07:52 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x2d4) writev(r1, &(0x7f0000000d80)=[{&(0x7f0000000300)="580000001400192340834b800481054e220000000058", 0x16}], 0x1) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) splice(r4, 0x0, r5, 0x0, 0x100000002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) fallocate(0xffffffffffffffff, 0x39, 0x2, 0x200) sendmsg$nl_route_sched(r1, &(0x7f0000000d40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000dc0)=@newchain={0x8b8, 0x64, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xfff1}, {0xffe0, 0xd}, {0x8, 0xb}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x884, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe, 0x4}}, @TCA_U32_POLICE={0x870, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x21791335}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0xa8d, 0x7, 0x10001, {0x0, 0x0, 0x81, 0x2, 0xf0, 0x200}, {0x20, 0x0, 0x9, 0x1, 0xff01, 0x6aa}, 0x7ff, 0x4, 0x6b}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x5, 0x80, 0x4, 0x0, 0x9, 0xde, 0x89b, 0x2, 0xd7f, 0x400, 0x8, 0x1ff, 0x401, 0x3, 0x87, 0xffffffff, 0x40, 0x7ff, 0x2, 0x7, 0x2, 0xfffffe00, 0x894, 0x9, 0x6, 0xffffffff, 0x57, 0x400, 0xffff, 0x4, 0x7, 0x0, 0x400, 0x6, 0xff, 0x2, 0x20, 0x1ff, 0x8, 0x7fffffff, 0x5c406018, 0xffff, 0x6, 0xffffffff, 0x7fff, 0x401, 0x1, 0x400, 0x1000, 0x10000, 0x6, 0x190c, 0x6, 0xffffff50, 0x1, 0x3, 0x4, 0x3, 0x6, 0xffffffff, 0x7ff, 0x7d3d, 0x80, 0x1, 0x8, 0x6, 0xffff0000, 0x1, 0x80, 0x8000, 0x0, 0x7f, 0x400, 0x1ff, 0x9, 0x5, 0x0, 0x7, 0xfffffffd, 0x9, 0x4, 0x5, 0x6, 0x1, 0x0, 0x5, 0x7ff, 0x3f, 0x0, 0x0, 0x3, 0x101, 0x0, 0x82b6, 0x2, 0x9, 0x40, 0x9, 0x6, 0x6, 0xec82, 0x8, 0x7fff, 0x800, 0xd32, 0x7, 0x0, 0x1, 0x6, 0x4, 0x2, 0x0, 0x5, 0x7fff, 0xaf1, 0x7ff, 0x8, 0x8, 0x5, 0x168, 0x20, 0x401, 0x7f, 0x7, 0x6, 0x38c7778, 0x8001, 0x10001, 0x3, 0x2, 0x3, 0x8, 0x290, 0x4, 0xffff, 0x81, 0x80000001, 0x3, 0xf438, 0x0, 0x1ff, 0x10001, 0xd9, 0x800, 0x8, 0x1f, 0x4, 0xffff7fff, 0x3, 0x2, 0xffffff4e, 0x0, 0xfffffffb, 0x8001, 0x4, 0x5, 0x82, 0xffff9c61, 0x800, 0x5, 0x4, 0x1000, 0x2, 0x3, 0x0, 0x38c, 0x7ff, 0x3, 0xffff, 0x3, 0x1, 0x8, 0x1, 0x8, 0x3ae, 0x3ff, 0xfffffff7, 0x8, 0xf0, 0xfae, 0x6, 0x3, 0x4, 0x0, 0x3, 0x8, 0x8, 0x96c00000, 0x6, 0xfffffe00, 0x63f0, 0x5, 0x9616, 0x10001, 0x0, 0x7, 0xae5c, 0x8f, 0x5, 0x4, 0x1cb2afa5, 0x0, 0xcf17, 0x2, 0xb66, 0x5, 0x80, 0xffff, 0x9a, 0xf66, 0x6, 0x80000001, 0xfffffffe, 0x2, 0x7, 0x1, 0x2, 0xffff, 0xf6, 0x81, 0x2, 0x40, 0xdba2, 0x3, 0x0, 0x867, 0x8, 0x3, 0x7, 0x7, 0x11f, 0xfff, 0x1, 0x7, 0x9, 0x3, 0x80, 0x8001, 0x401, 0xfffffffb, 0x8001, 0x9, 0x336f, 0x3, 0x0, 0x4, 0xc2, 0x8, 0x8, 0x6, 0x1, 0x80000000, 0x8000, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x40, 0x3ff, 0x0, 0x101, 0x2b2, 0x100, 0x1, 0x5, 0x401, 0x1, 0x0, 0x6, 0xe79, 0x0, 0x8, 0x5, 0x971d, 0x6, 0x6, 0x1, 0x4, 0x4, 0x8, 0x4, 0x6, 0x4c36, 0x39fd, 0x4, 0x1, 0x7fff, 0x7, 0x6, 0x5, 0x1800, 0x5, 0x20, 0x81, 0x9, 0x20, 0x80, 0x2, 0x0, 0xffff3893, 0xfffffffa, 0x4, 0x7, 0x7, 0x4, 0x3, 0x3, 0x6, 0x2, 0x4, 0x9, 0xf, 0x7fffffff, 0x1, 0x7ff, 0x1, 0xffff0000, 0xffffff01, 0x1cd, 0x20, 0x1c, 0x6, 0x0, 0x7, 0x400, 0x2, 0x2a, 0xffffff81, 0x5, 0x6, 0x2, 0x9, 0x9, 0x5, 0xffffffff, 0xffff, 0x9, 0x8, 0x7, 0x0, 0x9, 0x6, 0x6, 0x235c, 0x401, 0x7, 0x3, 0x0, 0x6f, 0x9, 0x40, 0x1, 0x6, 0x0, 0x80000001, 0x0, 0x4a, 0x20, 0x2, 0x0, 0xffffffff, 0xe6ac, 0x2, 0x0, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x20000000, 0x8000, 0x5e, 0x7, 0x4, 0xeb8c, 0x5, 0x20, 0x2, 0xc3, 0x1000, 0x5, 0x8, 0x3, 0x0, 0x0, 0x5, 0x1, 0xf8000000, 0x1, 0x800, 0xffffffff, 0x3, 0x6, 0x2, 0x7, 0x9, 0x8, 0xaa1d, 0xedb, 0xff, 0x3, 0x0, 0x7ff, 0x1000, 0x2, 0x1, 0x0, 0x5, 0x9, 0x401, 0xffff, 0x2, 0xfffffffa, 0xe6b, 0x6, 0x1ff, 0x4, 0x2, 0x3f, 0xfff, 0x0, 0x200, 0x2, 0x6, 0x2, 0x40, 0x9, 0x1, 0x4000, 0x3f, 0x80000000, 0x80000001, 0x4, 0x4, 0x81, 0x2778, 0x1, 0x6, 0x200, 0x1ff, 0x3, 0x6, 0x9, 0xfffffff9, 0x6ebc, 0x80000001, 0x5, 0x2, 0x9, 0x9, 0x0, 0xffffffff, 0x2, 0x81, 0x6, 0x4, 0x7ff, 0x8, 0x3, 0x1000, 0x6, 0x8, 0x5, 0xc6, 0x4, 0x8, 0x7f, 0x647, 0x1, 0x7, 0x1, 0x81, 0x7, 0x81, 0x100, 0xa05, 0x4, 0xffffffff, 0x5, 0x6, 0x101, 0xfffff6de, 0x3, 0x401, 0x9, 0x8, 0x9, 0x0, 0x5, 0x4, 0x9, 0x100, 0x2, 0x0, 0x0, 0x9, 0x48, 0x4, 0x5, 0x2, 0x5, 0x9, 0x8, 0x9, 0x101, 0x7, 0x4, 0x71, 0x0, 0xd909, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x4008004}, 0x408d1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000580)={0x9, &(0x7f0000000500)=[{0x34c, 0x1, 0xff, 0x6}, {0x1, 0xff, 0xff, 0x1000}, {0xfff, 0x8d, 0x9, 0xffff35d9}, {0xf080, 0x8, 0x7, 0x7ff}, {0xffff, 0x0, 0x9, 0x6e}, {0xfff9, 0x5, 0xff, 0x101}, {0x1, 0x56, 0x9}, {0x2, 0xdd, 0x7f, 0x8}, {0xfffc, 0x59, 0x0, 0x4}]}, 0x10) fcntl$dupfd(r8, 0x0, r7) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x70, 0xe0, 0x3, 0xd4, 0x81, 0x0, 0x8, 0x40, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x4, @perf_config_ext={0x1ff, 0x7d}, 0x4, 0x5, 0x4, 0x0, 0x7, 0x9, 0x27}, r9, 0x3, 0xffffffffffffffff, 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x23d46a5d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0e3fbc17c4933daa97b3dcf322a000000000000", @ANYRES16], 0x2}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 3293.225067][ T1330] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3293.255430][ T1330] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:52 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3293.276924][ T1330] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3293.296819][ T1330] EXT4-fs (loop0): get root inode failed [ 3293.303180][ T1330] EXT4-fs (loop0): mount failed [ 3293.347008][ T1444] EXT4-fs (loop5): Invalid log cluster size: 268435457 10:07:52 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:52 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0009ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:52 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000224000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3293.635569][ T1561] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3293.648725][ T1561] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3293.673865][ T1561] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3293.701695][ T1561] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3293.731553][ T1561] EXT4-fs (loop0): get root inode failed 10:07:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3293.740300][ T1561] EXT4-fs (loop0): mount failed 10:07:52 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a000affff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:52 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3293.910877][ T1570] EXT4-fs (loop5): #blocks per group too big: 16418 10:07:53 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000254000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3294.196170][ T1691] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3294.209132][ T1691] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3294.222476][ T1691] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3294.243453][ T1691] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:53 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:53 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3294.350873][ T1691] EXT4-fs (loop0): get root inode failed 10:07:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3294.404974][ T1691] EXT4-fs (loop0): mount failed 10:07:53 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a000bffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3294.698733][ T1905] EXT4-fs (loop5): #blocks per group too big: 16421 [ 3294.875107][ T1905] EXT4-fs (loop5): #blocks per group too big: 16421 [ 3294.875276][ T1946] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:53 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000f5254000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3294.948771][ T1946] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3294.973914][ T1946] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3295.062266][ T1946] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3295.137627][ T1946] EXT4-fs (loop0): get root inode failed [ 3295.144782][ T1946] EXT4-fs (loop0): mount failed 10:07:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3295.259853][ T2068] EXT4-fs (loop5): Invalid log cluster size: 4110417921 10:07:54 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a000cffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000040)=0xc) chown(&(0x7f0000000000)='./file0\x00', r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) chown(&(0x7f0000000000)='./file0\x00', r6, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x6}, [{0x2, 0x2, r4}, {0x2, 0x1, r6}, {0x2, 0x3, r9}], {0x4, 0x5}, [{0x8, 0x4, r10}], {}, {0x20, 0x4}}, 0x44, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000004c0)={0x367, 0xe7, 0xffffffff, 0x3f, 0x7f, 0x800}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r11, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000044}, 0x48000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/110, 0x6e, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x52f23c7385285a4c, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x8001}, [@map={0x18, 0x4, 0x1, 0x0, r13}]}, &(0x7f00000005c0)='syzkaller\x00', 0x9, 0xc1, &(0x7f0000000600)=""/193, 0x41100, 0x0, [], 0x0, 0x19, r8, 0x8, &(0x7f0000000700)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x4, 0x2db, 0x5}, 0x10, r14, r12}, 0x78) write$FUSE_INTERRUPT(r12, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r12, 0x0) ioctl$FS_IOC_GETFLAGS(r12, 0x80086603, &(0x7f0000000000)) [ 3295.473599][ T2178] EXT4-fs (loop5): Invalid log cluster size: 4110417921 10:07:54 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:54 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004284000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3295.523695][ T2180] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3295.534005][ T2180] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3295.557579][ T2180] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3295.589958][ T2180] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3295.616730][ T2180] EXT4-fs (loop0): get root inode failed 10:07:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x300}, {{@in6=@rand_addr="fbfc5d1bf0fe49f2cf8632b6770fa168"}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xa8) write(r0, &(0x7f0000000780)="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", 0xf00) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xb5bd7dc56a15c312}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x20200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x800002, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r8) splice(r7, 0x0, r8, 0x0, 0x100000002, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, &(0x7f0000000380)={0x2, 0x1, 0x11, 0x19, 0x123, &(0x7f0000001680)="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"}) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000340)={0x4, &(0x7f0000000100)=[{0x80, 0x8001}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0x4000}]}) lseek(r6, 0x800002, 0x0) fallocate(r6, 0x3, 0x0, 0x8020003) lseek(r6, 0x0, 0x3) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000800bf03050000000000000500ffffff07e1d30b6c0de2492d49c5e68667b8"], 0x5}, 0x1, 0x0, 0x0, 0x24004014}, 0x400c0) unshare(0x40000000) [ 3295.657820][ T2180] EXT4-fs (loop0): mount failed 10:07:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:54 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3295.874948][ T2399] EXT4-fs (loop5): Invalid log cluster size: 67108865 10:07:54 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a000dffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:54 executing program 1: r0 = creat(&(0x7f0000000000)='./control\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x100000002, 0x0) write$P9_RVERSION(r3, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 10:07:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:55 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3296.061321][ T2517] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3296.096471][ T2519] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3296.117433][ T2519] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3296.133044][ T2519] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3296.172144][ T2519] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3296.194258][ T2519] EXT4-fs (loop0): get root inode failed [ 3296.230728][ T2519] EXT4-fs (loop0): mount failed 10:07:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r2 = socket$inet6(0xa, 0x3, 0x100000001) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) sendmmsg(r2, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:55 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x70, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x406}]}, 0x70}, 0x1, 0x0, 0x0, 0x48d8}, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000000)=""/148) r4 = socket$inet6(0xa, 0x2, 0xff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000fcb000)=0x401, 0x4) close(r4) 10:07:55 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004294000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:55 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a000effff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:55 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3296.486901][ T2648] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3296.486906][ T2649] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3296.486918][ T2649] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3296.515775][ T2649] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3296.536796][ T2649] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:55 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000240)=0x1) r5 = dup2(r2, r2) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/172) getsockopt$packet_int(r5, 0x107, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RREADDIR(r5, &(0x7f0000000000)={0x2a, 0x29, 0x2, {0x5b, [{{0x4, 0x3, 0x5}, 0xf576, 0x8, 0x7, './file0'}]}}, 0x2a) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=@ng={0x4, 0x3, "58f1b7"}, 0x5, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(r0, &(0x7f0000000280)={@void, @void, @mpls={[{0x302c}], @ipv4=@tipc={{0x34, 0x4, 0x1, 0x5, 0xfe, 0x66, 0x0, 0x6, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x2, 0x9, "8392cd346884a6"}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x12, "5ce59b51e81bd14826162691243b326e"}, {0x1, 0x4, "edbc"}, {0x6, 0xa, "78bfbbab683b591d"}, {0x6, 0xa, "f4aacb49a94f3bf6"}]}, @timestamp_addr={0x44, 0x2c, 0xac, 0x1, 0xa, [{@multicast2, 0x5}, {@local, 0x8b9d}, {@empty, 0xc4}, {@remote, 0x10001}, {@rand_addr=0x8, 0x3}]}, @timestamp_prespec={0x44, 0x1c, 0x43, 0x3, 0x0, [{@local, 0xfffff001}, {@remote, 0x10000}, {@broadcast, 0x8}]}, @timestamp_prespec={0x44, 0x1c, 0x69, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x90b}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x7, 0xf6, [@empty]}, @timestamp={0x44, 0x14, 0xe7, 0x0, 0x8, [0x1, 0x4, 0x4, 0x8]}]}}, @payload_mcast={{{{{{0x2e, 0x0, 0x1, 0x0, 0x0, 0xb, 0x2, 0x2, 0x80, 0x0, 0x0, 0x5, 0x3, 0x1, 0x81, 0x6, 0x0, 0x4e20, 0x4e24}, 0x0, 0x3}, 0x1}, 0x4}}, [0x0, 0x0]}}}}, 0x102) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000003c0)={0x6, {0x7, 0x2, 0x4, 0x4, 0x9}}) 10:07:55 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000002e4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0002a40000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3296.653761][ T2649] EXT4-fs (loop0): get root inode failed [ 3296.674962][ T2649] EXT4-fs (loop0): mount failed 10:07:55 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0010ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="a3bf2ea00db8"}, 0x14) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000080)="03040030ea00573a00000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0xfd82, 0x4000002, 0x0, 0x2ff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) splice(r5, 0x0, r6, 0x0, 0x100000002, 0x0) r7 = openat$cgroup_type(r5, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r9) splice(r8, 0x0, r9, 0x0, 0x100000002, 0x0) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="d5c5e6117386b2c9", 0x8}, {&(0x7f00000001c0)="594608d34f7b599b880adfe852237aae601b2294dba9a25bbf18f77451acf7885208c02cd383d68643142edfbe226a12f6390548721501ac6be171c06efd8a379a3f59bd9a3e72ff5e0a0ca5f1df628b3b4f6a", 0x53}, {&(0x7f0000000300)="9c37c024b462e248c122c63e546ba080e3c2e8a0d7b37523740301dced4d2d7ca0416a9b2bc65ad00d07c08aaec526d3d98911ee92aa33420cf93bc93e3c6e7b9d08bad55d7e71aa8b5c868b093f33f5bb21346150a8a2086937573a41b7f0cfe8da0d3ffd18a8ff1fea9a3688f8ca0b9256b6158779df7e28d75b5ad3f7b5c5d457de4421c9bb8440defc759dde6ff60a6fe78ff1ffca568392a5162f40b8e98adcf75484a944a62dd2de5198f4abdf60fde5d5c30fcebdaedd8101fcd26897525c403b0a0d900b72ab8cb489b8d5d07869966d14260e84fd2ea5ae0e1c7610ef98d928", 0xe4}], 0x3, 0x0) sendfile(r7, r9, &(0x7f0000000040)=0xff, 0xe766) 10:07:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0002a80000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3296.931408][ T2776] EXT4-fs (loop5): #blocks per group too big: 16430 [ 3296.979870][ T2781] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3297.052700][ T2781] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3297.103113][ T2790] EXT4-fs (loop5): #blocks per group too big: 16430 [ 3297.123742][ T2781] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r2 = socket$inet6(0xa, 0x3, 0x100000001) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) sendmmsg(r2, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:56 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000324000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3297.272203][ T2781] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3297.338503][ T2781] EXT4-fs (loop0): get root inode failed [ 3297.349097][ T2781] EXT4-fs (loop0): mount failed 10:07:56 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:56 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0011ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = open(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000002540)=[{0x0}, {0x0}, {&(0x7f0000003800)=""/4100, 0xffffff5f}], 0x3, 0x0, 0x17b, 0x3e8}, 0x180) clock_getres(0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) write$binfmt_elf64(r0, &(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYRES32, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="bfc98e8192cb0a9e79f202467c4be532cb8509741d6b35b9087b516de574e75eb6e7707a648644a4648487a557ec9d89ce3c0304e0d899911dc395259c95cc049b413fcc8bb534aee4d921485ca5cf773b0cab00346675446489d0", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES64, @ANYRESHEX=0x0, @ANYPTR], @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64, @ANYRESHEX], @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64, @ANYRES32, @ANYBLOB="da9191a0e7d50931ff67a36a2b0a4538d83761b40fa899b14158a6e13222b4368cbf26872f561879e9a9990061ff3b43bb7365ee216f5ee11947b1081d9570cb7a99c8c0280b81a5b3c9d726cf933d9365fae704b66d82fd415d51e52ceb15eeb7ba2a15e37d0b1a7c5b2178ae665a548750f99fbc27893a21fd3a2ca9062b9b1ed13f6da70fc2e08601ee35a7fde01f98bf78bccba4cc86834bc510de0c8189a068046b73f847db8f7da84bc4dae1e2be3647310e0f1a8dad9f362a88bfa2c56d04ba0f9ea152a11b41d537cca8552032516fc2def14f1b6e7d2597eb14a11ededfd618477d7180f8a195ddf1fa85a1efd0041eac2c2de24eb745d2854f8f5be705756eb03e3c1c095640ebc84c", @ANYBLOB="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"], 0x2df) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r5, r7, 0x0, 0x80000000) fallocate(0xffffffffffffffff, 0x0, 0x6, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/192, 0xc0}, {0x0}], 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x404000, 0x15) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r9) [ 3297.440030][ T2902] EXT4-fs (loop5): #blocks per group too big: 16434 10:07:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3297.568102][ T2916] EXT4-fs (loop5): #blocks per group too big: 16434 [ 3297.578632][ T2920] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3297.593168][ T2920] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3297.608455][ T2920] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:56 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000a9364000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = open(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000002540)=[{0x0}, {0x0}, {&(0x7f0000003800)=""/4100, 0xffffff5f}], 0x3, 0x0, 0x17b, 0x3e8}, 0x180) clock_getres(0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) write$binfmt_elf64(r0, &(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYRES32, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="bfc98e8192cb0a9e79f202467c4be532cb8509741d6b35b9087b516de574e75eb6e7707a648644a4648487a557ec9d89ce3c0304e0d899911dc395259c95cc049b413fcc8bb534aee4d921485ca5cf773b0cab00346675446489d0", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES64, @ANYRESHEX=0x0, @ANYPTR], @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64, @ANYRESHEX], @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64, @ANYRES32, @ANYBLOB="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", @ANYBLOB="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"], 0x2df) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r5, r7, 0x0, 0x80000000) fallocate(0xffffffffffffffff, 0x0, 0x6, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/192, 0xc0}, {0x0}], 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x404000, 0x15) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r9) [ 3297.654106][ T2920] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3297.674622][ T2920] EXT4-fs (loop0): get root inode failed [ 3297.682044][ T2920] EXT4-fs (loop0): mount failed 10:07:56 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0012ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0002b00000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3297.934444][ T3046] EXT4-fs (loop5): Invalid log cluster size: 2835349505 [ 3298.042990][ T3085] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3298.054584][ T3085] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3298.066668][ T3085] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:07:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r2 = socket$inet6(0xa, 0x3, 0x100000001) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) sendmmsg(r2, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800070800092500090007000a", 0x11) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x10003, 0x0) 10:07:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3298.178745][ T3085] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3298.245028][ T3085] EXT4-fs (loop0): get root inode failed [ 3298.259166][ T3085] EXT4-fs (loop0): mount failed 10:07:57 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000100)=0x2c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x400000, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000180)) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:initrc_var_run_t:s0\x00'}]}, 0x40}}, 0x0) 10:07:57 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000003374000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0001c00000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:07:57 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0014ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3298.418098][ T22] audit: type=1400 audit(1581329277.299:201): avc: denied { getopt } for pid=3277 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 10:07:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) fsync(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="eee44cf1275be7241956e5e091857646a5a12870800580bb9dd4935a07551ff6afac7970f130f7f6f282a8caac716404"], 0x30) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="eee44cf1275be7241956e5e091857646a5a12870800580bb9dd4935a07551ff6afac7970f130f7f6f282a8caac7164048a2b226b14f899c1655c60788f884669070865f7e9a3a903ff72b983b4b0b51d3f0b982cc9a19db3251d93a8a8f619a4054be07c2949"], 0x66) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x6, 0x1, 0xfffff800, 0x4, 0x101, 0x426, 0x3, 0x3cae, 0x80}, 0x0) [ 3298.527683][ T3282] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3298.556027][ T3282] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3298.594157][ T3282] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3298.609463][ T3281] EXT4-fs (loop5): Invalid log cluster size: 50331649 [ 3298.610152][ T3282] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3298.630668][ T3282] EXT4-fs (loop0): get root inode failed [ 3298.637496][ T3282] EXT4-fs (loop0): mount failed 10:07:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:57 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000003384000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:57 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0022ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3298.987232][ T3505] EXT4-fs (loop5): Invalid log cluster size: 50331649 10:07:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000000)="1841f901738656504e87ca14246e7eb4f39a806667cc6a0fefe2335672fea80473700e594d17cedb410711", &(0x7f00000001c0)="b6f58c4145a96e8ccdc54563a54c82b9d6b217990e6ef0c1ab5acd340c871ad754e97cd8429c13521dc5c42ddf488f6420788e26672a9514fab27858cbe793d2432250527c3d1fff465f26784efb637a04a7b635b1c92f", 0x1}, 0x20) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000280)={0x4, 0xfffffffffffffffe, 0x5, 0x3, 0xb23d, 0x2}) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="240000002000070700fffd946f61050002000000fe0208010001080008000c000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 10:07:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3299.074869][ T3506] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3299.118258][ T3506] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3299.131047][ T3524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3299.154635][ T3506] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3299.167343][ T3518] EXT4-fs (loop5): Invalid log cluster size: 50331649 [ 3299.210697][ T3506] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3299.256813][ T3506] EXT4-fs (loop0): get root inode failed [ 3299.292401][ T3506] EXT4-fs (loop0): mount failed 10:07:58 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) ftruncate(r1, 0x8200) r5 = socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) splice(r6, 0x0, r7, 0x0, 0x100000002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) write$FUSE_ATTR(r7, &(0x7f00000004c0)={0x78, 0x0, 0x1, {0x3, 0xd38, 0x0, {0x3, 0x9, 0xc42, 0x100000001, 0x8, 0x0, 0x5, 0x8, 0x800, 0xe0, 0x200, r8, r9, 0x6, 0x6}}}, 0x78) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r5, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x26, 0x0, 0x1, 0x3, 0x6, 0x3, 0x330, 0x40, 0x389, 0x1, 0x0, 0x38, 0x1, 0x7, 0x84f, 0x7}, [{0x60000000, 0x8, 0x81, 0x5, 0x1, 0x1000, 0x6, 0x10001}], "bee1946c2543010fc00daa3af7a8c3dc90314480ad1a03136e155741bef9e68d64485f5b79c4a5e8c86db0bddefa76be4aba6049ce5e1d4f3c2a2650c82c7e5035cba57db19d6819bd0e1a3ed4ff492f3c5462863ab0bbd6abb778961ea11134775f8c8b88567c2e449e62fc14b60ba1ab4d985b4d9f5706b2095e6e2e48c56b6aa5edc32500", [[], [], [], [], [], []]}, 0x6fe) r10 = socket(0x10, 0x2, 0x0) write(r10, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r10, &(0x7f0000002ec0), 0x400000000000ec0, 0x0, &(0x7f00000001c0)={0x77359400}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:07:58 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000003f4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:58 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0002c40000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:07:58 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0025ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3299.577740][ T3636] EXT4-fs (loop5): #blocks per group too big: 16447 10:07:58 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3299.657053][ T3647] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3299.678765][ T3647] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:07:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3299.724762][ T3647] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3299.752814][ T3755] EXT4-fs (loop5): #blocks per group too big: 16447 [ 3299.769317][ T3647] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:07:58 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000fb3f4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3299.839177][ T3647] EXT4-fs (loop0): get root inode failed [ 3299.859663][ T3647] EXT4-fs (loop0): mount failed 10:07:58 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a002effff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:58 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3300.096958][ T3875] EXT4-fs (loop5): Invalid log cluster size: 4211081217 10:07:59 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000ff3f4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3300.316487][ T3881] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:59 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:07:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:59 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3300.431036][ T3881] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3300.478318][ T3881] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3300.512071][ T3881] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3300.556273][ T3881] EXT4-fs (loop0): get root inode failed [ 3300.599571][ T3881] EXT4-fs (loop0): mount failed [ 3300.632969][ T3996] EXT4-fs (loop5): Invalid log cluster size: 4278190081 10:07:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:07:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:07:59 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0048ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:59 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000404000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:07:59 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000110) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000001}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)={{0x10b, 0x3f, 0x5c, 0x1eb, 0x297, 0xff, 0x40, 0x5}, "0253b18c834fa50e2b7d86aa5e67daecc04ffda9b4f9a728aa5539c68bb63b0685c020117bd74f646cfdfed0b54794281f6ddd040c14da6b07724ce298753a6ef05967692312b2cf22e5a5ad81d70bc3f7aed2e5b4ca5a42518ef8afa4b2610867003d73c07ce245bfdcd099cb0e94770837cf581902c58aa33cc528ff37b4cddb", [[], [], [], []]}, 0x4a1) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x2e0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 3300.951088][ T4117] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:07:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3300.996702][ T4122] EXT4-fs (loop5): #blocks per group too big: 16448 [ 3301.040301][ T4117] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3301.064952][ T4117] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:08:00 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000040)='./bus\x00', r0, &(0x7f0000000080)='./bus\x00') [ 3301.182217][ T4117] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:08:00 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000484000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3301.233482][ T4117] EXT4-fs (loop0): get root inode failed [ 3301.260103][ T4117] EXT4-fs (loop0): mount failed 10:08:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0001d40000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:08:00 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:00 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a004cffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3301.494412][ T4246] EXT4-fs (loop5): #blocks per group too big: 16456 10:08:00 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3301.646384][ T4254] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3301.682523][ T4254] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:08:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3301.694193][ T4254] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3301.717965][ T4246] EXT4-fs (loop5): #blocks per group too big: 16456 [ 3301.733041][ T4254] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:08:00 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000004c4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3301.806354][ T4254] EXT4-fs (loop0): get root inode failed [ 3301.891590][ T4254] EXT4-fs (loop0): mount failed 10:08:00 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0060ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r1, 0x4, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 10:08:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3302.123763][ T4482] EXT4-fs (loop5): #blocks per group too big: 16460 [ 3302.186682][ T4485] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3302.197479][ T4485] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3302.234432][ T4485] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3302.259887][ T4485] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:08:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xd, &(0x7f0000000040), 0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x800, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f00000000c0)=0x10000) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000001c0)={@multicast1, @empty}, &(0x7f0000000200)=0x8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000002, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'xfrm0\x00', 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) splice(r4, 0x0, r5, 0x0, 0x100000002, 0x0) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000240)=""/160) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) wait4(0x0, 0x0, 0x0, 0x0) 10:08:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3302.281092][ T4482] EXT4-fs (loop5): #blocks per group too big: 16460 [ 3302.303776][ T4485] EXT4-fs (loop0): get root inode failed [ 3302.311027][ T4485] EXT4-fs (loop0): mount failed 10:08:01 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000544000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:01 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0068ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:01 executing program 1: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/40) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000480)="eb3c906d6b66732e666174000204010002000270f7f8b378cf9112cce0ae0005f8c7f5b45df3", 0x26}], 0x0, 0x0) 10:08:01 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000040)=0xc) write$binfmt_misc(r3, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r6], 0x17) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) r9 = dup2(0xffffffffffffffff, r1) close(r9) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x13, 0xa, 0x97, &(0x7f0000000280)="e307bf68b40e1512974eb3e1414bf1298700559f511af9f1ff2c391edef2759634a46e7076b684c0aaf40ab0457fa9b00a6b3eec48e7f622e492475930be712dcf039dee86ec4e6b6e17cf9700c3b2c6ff17014f845559e7d363419d8ff6fd72be915dab3b67bc53cd5b3b4dc6eee15f9d6075f97e359870cfc00fc13062bffb3c1ca76080f03b92c60dcfebc06e34c5c138d31cffb9c83f8285fdef4e42766e29ae5d0977c0660100504b154a8a0ae610b11c5aeda780b54fa1b1572ad6f108bcf1ea41e3c227f80d9a2fabe7a7b1f9fb41c43795e3f6881bce69559dcb612e69dca1809f6e38957b9387b478b17b4300e0f88e739e8294cec2835412ee8588d409c33eb80fd0f0e701f4b15a892c9acbfc58169bd823f2e7c5b234880cc0d7135d3c8bbee59d40e24da84e34fd352a375a1818464c94a04fc42dfb7d2de4a65381a2381b0747b36df4f57c6a31e238519154bfc4a3b89bec11b08198a9c0bf1553074198e8b513233e4ba8bf0398e4b066c1f40d0c654b6299c6eae5e68755973ccf4f56287df43e588979ac64e24a4c83456f8fe8dd91c3bca7a6ff53f37b16b202463eb1d8abc42594290b37932e44138706f2182b838262698d884249b7e30da4a87b06ecf0073a1c1cebeb6ec5e4f98a2ff445cc88e2e40a7b2627178813bb7a16ce62a3098c25e12ca3ab9f0ffd5a89a93a8fc37c29f02361f71080113946f69a7bd01328e8ed5f179f02329db2d5f81b691a42f7e317034fd5edd16d443ea79af47f4133ee83b3738e79d7dc1e23f8cf83b1f3d2085527fda56c90d76d7d31f8612ad7c82b65a38df5d778d06aab530353bfc6a34fcc296f63d164c64010f909cddab550ea9ff3f2cd8ad248c06bf3585b92d9b53f5d5c299b359acd881fd737ab91cc103f6d490b698f9692c0d62917364c4a618686b1ba381d92b14ee971cb5bdd544ca89253a76ab119f3921702869b9898ac0e05c3232008a951c0a2bfc36daf6bf9dfbeb0307b69a2e617590722de1376bbb017fc4c7faae6abe28b5a0b202fd79295b1d0cbea5bedd8c0e7d87ad096a1268f89142f6e191ac9bd5a64016aa191c4cd74066dec01f691c256a0e342fc8562c999458aee900bef8f9c17dbdd9113509213c3ebf787e7cdae08753d7eeb075c0158d9503ff0a741b8bfa4983dbc466e668f0aa0af20b090b7650ba597e3bea58bafbab67b7b5f4cd92eea0c1224afaea4447e83f88f6c30c3982795e1f1cc9d159dd37cfe8d61e6a6fdf6b13ef8d2bc02e8ab9126d05fd127a0381d8440321bd46c68c6384d35e913630e441f7e00b7567c031ceb1a56e343a3a9366e1479405d5914ec502b712f469a599a6f51abbcea59ae8227b8ed5ab88197ccd0d3facd92a6a9961603be3923e6a85d4a5b08b5133a91a8b161f5332e27fae9f4fdc19b4f3c58cf1eded703"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r11 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r13, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r13) splice(r12, 0x0, r13, 0x0, 0x100000002, 0x0) ioctl$GIO_SCRNMAP(r13, 0x4b40, &(0x7f00000000c0)=""/113) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) 10:08:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3302.582094][ T4715] EXT4-fs (loop5): #blocks per group too big: 16468 10:08:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(r4, &(0x7f0000000000), 0x1, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) getpgrp(0x0) sync() [ 3302.636619][ T4719] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3302.669131][ T4719] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3302.694177][ T4719] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3302.708722][ T4831] EXT4-fs (loop5): #blocks per group too big: 16468 [ 3302.716287][ T4719] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3302.733468][ T4719] EXT4-fs (loop0): get root inode failed 10:08:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffdfff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10017e, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1c"], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 3302.741710][ T4719] EXT4-fs (loop0): mount failed 10:08:01 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004544000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3302.950391][ T4945] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3303.088569][ T5048] EXT4-fs (loop5): Invalid log cluster size: 67108865 10:08:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, &(0x7f0000000200)=0x14) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000d40)=0x4) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xffffffea) readv(r2, &(0x7f0000000800)=[{&(0x7f0000000280)=""/146, 0x92}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000700)=""/215, 0xd7}], 0x7) syz_genetlink_get_family_id$team(&(0x7f0000000e80)='team\x00') munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000006311380000000000180000000101000000000000ff00000095000080aeccfd1e56cba687c5bf988727b9af267e07944291"], &(0x7f0000000080)='GPL\x00', 0x2, 0xd3, &(0x7f0000000f40)=""/211, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000}, 0x10}, 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x100000002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/zero\x00', 0x103301, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000f00)={{r5}, 0x400, 0x0, 0xff}) clone3(&(0x7f0000000c00)={0x10000000, &(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00), {0x3a}, &(0x7f0000000a40)=""/80, 0x50, &(0x7f0000000ac0)=""/201, &(0x7f0000000bc0)=[0xffffffffffffffff], 0x1}, 0x50) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_buf(r8, 0x29, 0x2f, &(0x7f0000000d80)=""/177, &(0x7f0000000e40)=0xb1) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) clone3(&(0x7f0000000cc0)={0x1000000, &(0x7f00000001c0), &(0x7f0000000880), &(0x7f00000008c0), {0x14}, &(0x7f0000000900)=""/2, 0x2, &(0x7f0000000940)=""/23, &(0x7f0000000c80)=[r6, r9], 0x2}, 0x50) 10:08:02 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004554000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:02 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a006cffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) symlink(0x0, 0x0) r0 = getpid() ptrace$cont(0x7, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) waitid(0x3, 0x0, 0x0, 0x1000000, &(0x7f0000000440)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) gettid() creat(0x0, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) r4 = creat(0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000640)={'nat\x00', 0x41, "176564964fb692e0f1b3d996a09da4dc1807d8d58a09767c0552e8cad946e3e67bd3b82ee2faf775f6cc52bacd8d050009f611fd0074b5777226c13fde1b382309"}, &(0x7f0000000100)=0x65) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff0091ad0000000000000000000000000001e5ff01000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000670200000000880001000000000004"], 0x1) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) [ 3303.348548][ T5059] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3303.390654][ T5063] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3303.412675][ T5059] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:08:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x95}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz0\x00') [ 3303.491184][ T5059] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:08:02 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3303.531698][ T5273] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3303.545230][ T5059] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3303.558240][ T5059] EXT4-fs (loop0): get root inode failed [ 3303.563933][ T5059] EXT4-fs (loop0): mount failed 10:08:02 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0074ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:02 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004564000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:02 executing program 1: r0 = socket$inet(0x2, 0x800, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="36e4089fe201812eb8adeab1c4a74373ad84a3a857760c9d063b2ae46b392d721ef085ccd1b69cf22d3861c9aa503aab497072fa548a039a723d3d3ba2bfb426568f2cc2b8332fb97af776a5c2cc3adfcc8a36c254b8175cd6741203c9b798f6a071583f6cc7c61eb9d6be747103948818e95470000ded7a16535d2ab63d12d071cb895afd0d2ece84e81bde0defc1c07d8b33d2d111c9eaa6b12a2cea9771d9604e56c9d9020ccc0c", 0xa9) unshare(0x44000600) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x400880, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x1a92b, 0x22}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000240)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r8) splice(r7, 0x0, r8, 0x0, 0x100000002, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r12) splice(r11, 0x0, r12, 0x0, 0x100000002, 0x0) r13 = dup(r12) ioctl$sock_SIOCOUTQ(r13, 0x5411, 0x0) [ 3303.808076][ T5289] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3303.844028][ T5296] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3303.893140][ T5289] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3303.986293][ T5289] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3304.155797][ T5289] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated 10:08:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:03 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000000000000010000050000000001000000000000005f3000b51512d8dcf9a8210054bf5f9c29220bd13d11b2548b3fb0d24c1e74acbab04a5824699b00cde5da9935636d68295cc053b77cc8434490f3eb9eff3fabd495f45e4cda6c273f92f6284a30645a8fe53ac3a5cf60d8a3004867d9888b4ee4bbd3fcff68a420b99183ba45f30248ba46937aba6340"], 0x0, 0x34}, 0x20) 10:08:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0001e40000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:08:03 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004574000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3304.216114][ T5289] EXT4-fs (loop0): get root inode failed [ 3304.223966][ T5289] EXT4-fs (loop0): mount failed 10:08:03 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a007affff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x2, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0xee01) setfsuid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') fchdir(r1) ioctl$RTC_PIE_ON(r1, 0x7005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setfsuid(0x0) setresuid(0x0, 0x0, 0xee01) rt_sigqueueinfo(0xffffffffffffffff, 0x1, &(0x7f0000000300)={0x34, 0x80000001}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) io_setup(0x2, &(0x7f0000000880)) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000140), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r3, &(0x7f00000017c0), 0x1a1, 0x0) [ 3304.507388][ T5430] input: syz0 as /devices/virtual/input/input46 [ 3304.515637][ T5428] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:08:03 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3304.681107][ T5425] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3304.707125][ T5428] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:08:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3304.767230][ T5428] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:08:03 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x20, 0x37, 0x1, {0x662eeb792e13c079, 0x400, 0xfa1, 0x0, 0x2, 'E!'}}, 0x20) r1 = socket$unix(0x1, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000013c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001400)={'vcan0\x00', r2}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001440)={0x40, 0x5d, "f6f5b41e62d7937aa65d1f22447e9c4d10eac125e6f6e12e0df177348e25238065d363ea7600e5c071f6432b1d3918183601982e0c27d683a82a818360815ec637e13fa73d05be1ee84cb327d85f1d7afe5f375d9b0c9a99c836e5c2b7"}) r3 = openat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', 0x10000, 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000001500)={0x3, 0x2, 0xffffffff, 0xff, 0x10000, 0x9}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) statx(r0, &(0x7f0000001580)='./file1\x00', 0x0, 0x8, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x800, 0x200, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r4, &(0x7f0000001a40)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f0000001800)={0x1dc, 0x13, 0x3, 0x3, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x1}, [@nested={0x10, 0x1f, 0x0, 0x1, [@typed={0xa, 0x35, 0x0, 0x0, @str='wlan1\x00'}]}, @nested={0x10, 0x65, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @uid=r5}, @typed={0x4, 0x7a}]}, @generic="21edf97b18ad7e9c93ae91b02b88f3e825f8e6f9ce4e1580e71697719e13dae8c83e597d7e8475d633a99c2e2c52ea760d6e59b90d74f1950c0f441e35cdba69ff0cbce7b70d861d504362aa7a2ca358dde0456889e883f0d7bb6a795ec998c98ab1f17c69c375ea64f35bb110d51a2e80bd38ef378bd6c849d550671e7bcf4b584f57b467b9c4f051992916aadab1a3acd5aba42562da0798b8813983c44ef4ca0603e7c1a51f5009a3df331320366d4c1bc849d2a8cfb1d4306f01a270f405b78cf971dd839bb0d771d0aba836eb2393ddc2171afbaba69f", @typed={0x8, 0x43, 0x0, 0x0, @uid=r6}, @generic="ac59faba3af43c0a6dfbc85d0d1530965238d8", @generic="75b1cdf1d756335b4b5d5aa5ba4f85748d6653313dc05bb8ffdb9ea6b954d0f6ad19ed78d06dee9c67aa84a97fba3090aaf199b83169e5cc2edefa39a457685b98ab125bb07fb364ee920b6be4723582a15a9e70d6cf48d0d9c81deb4d4a816d59104832b53b1b5601251c4d8de9fe701d54a29f42d2dc99fc112848b49b7e4b137571c4a64b161fe8537f44372537aa2492bb58d79b160b6dcdc5cf5006eb53dc4ef9391a1db0036f63c7f4a599972d3217"]}, 0x1dc}, 0x1, 0x0, 0x0, 0x636511d52eb09176}, 0x20000000) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/zero\x00', 0x2188c0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001bc0)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001cc0)=0xe8) sendmsg$nl_route_sched(r7, &(0x7f0000001dc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)=@newtfilter={0x78, 0x2c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x3, 0xfff1}, {0xd, 0xfff3}, {0xfff2, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x241c7ba3}, @TCA_CHAIN={0x8, 0xb, 0xc5}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x8, 0x1f}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bridge\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x840) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001e00)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept$inet(r9, &(0x7f0000001e40)={0x2, 0x0, @local}, &(0x7f0000001e80)=0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/zero\x00', 0x80, 0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000001f00)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001f40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000001fc0)={r10, 0x7, 0x1}) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000002040)) r12 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002080)='cgroup.type\x00', 0x2, 0x0) r13 = open$dir(&(0x7f00000020c0)='./file0\x00', 0x400000, 0x8) sendfile(r12, r13, 0x0, 0xffffffffffffffff) r14 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002100)='/dev/bsg\x00', 0x4088c3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r14, 0xc018620b, &(0x7f0000002140)={0x1}) openat$cgroup(r11, &(0x7f0000002180)='syz0\x00', 0x200002, 0x0) fcntl$setpipe(r13, 0x407, 0x4) [ 3304.868350][ T5428] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3304.893017][ T5547] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3304.920509][ T5428] EXT4-fs (loop0): get root inode failed [ 3304.999700][ T5428] EXT4-fs (loop0): mount failed 10:08:03 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004584000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:04 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a00f0ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3305.329294][ T5647] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3305.355656][ T5671] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3305.366538][ T5671] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:08:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x44) gettid() timer_create(0x8, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r2) write$FUSE_LSEEK(r3, &(0x7f0000000580)={0x18, 0x0, 0x4}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="49c7eb06a9ed4d29c7092967763d3135dc026573d250daefe3a4e98bb1f83b329f41d928f8ce4a4b989b76da7c6216270c001e3c"], 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = creat(&(0x7f00000004c0)='./file1\x00', 0x105) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000500)={0x3, 0x21, 0x16, 0x6, 0xa, 0x400, 0x0, 0x3}) r6 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) ftruncate(r6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x4, 0xd, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0xb}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x20000}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x4d2, 0x3c}, 0x0, @in=@empty, 0x20, 0x4, 0x0, 0x1}}, 0xe8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r8, 0x0, r9) ppoll(&(0x7f0000000540)=[{r9, 0x22f5}], 0x1, &(0x7f00000005c0), &(0x7f0000000600)={[0x3ff]}, 0x8) sendmmsg(r7, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000180)={0x5, 0x8, 0x0, 0x2}, &(0x7f00000001c0)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000000), 0x10, r10}, 0x78) [ 3305.380034][ T5671] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:08:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0002ed0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3305.451266][ T5671] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3305.572107][ T5678] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3305.618234][ T5671] EXT4-fs (loop0): get root inode failed [ 3305.665085][ T5671] EXT4-fs (loop0): mount failed 10:08:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:04 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:04 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004594000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:04 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a00000e0053ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0001f00000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3306.134179][ T5806] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3306.155421][ T5805] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3306.213620][ T5806] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3306.288314][ T5806] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3306.326935][ T5819] EXT4-fs (loop5): Invalid log cluster size: 67108865 10:08:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:05 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000045a4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3306.346622][ T5806] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3306.360131][ T5806] EXT4-fs (loop0): get root inode failed [ 3306.378818][ T5806] EXT4-fs (loop0): mount failed 10:08:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:05 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a00000f0053ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x44) gettid() timer_create(0x8, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r2) write$FUSE_LSEEK(r3, &(0x7f0000000580)={0x18, 0x0, 0x4}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="49c7eb06a9ed4d29c7092967763d3135dc026573d250daefe3a4e98bb1f83b329f41d928f8ce4a4b989b76da7c6216270c001e3c"], 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = creat(&(0x7f00000004c0)='./file1\x00', 0x105) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000500)={0x3, 0x21, 0x16, 0x6, 0xa, 0x400, 0x0, 0x3}) r6 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) ftruncate(r6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x4, 0xd, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0xb}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x20000}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x4d2, 0x3c}, 0x0, @in=@empty, 0x20, 0x4, 0x0, 0x1}}, 0xe8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r8, 0x0, r9) ppoll(&(0x7f0000000540)=[{r9, 0x22f5}], 0x1, &(0x7f00000005c0), &(0x7f0000000600)={[0x3ff]}, 0x8) sendmmsg(r7, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000180)={0x5, 0x8, 0x0, 0x2}, &(0x7f00000001c0)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000000), 0x10, r10}, 0x78) 10:08:05 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3306.857151][ T5838] EXT4-fs (loop5): Invalid log cluster size: 67108865 10:08:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3306.991952][ T5844] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3306.998915][ T5861] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:08:05 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000045b4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3307.052328][ T5861] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3307.125572][ T5861] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:08:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x44) gettid() timer_create(0x8, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r2) write$FUSE_LSEEK(r3, &(0x7f0000000580)={0x18, 0x0, 0x4}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="49c7eb06a9ed4d29c7092967763d3135dc026573d250daefe3a4e98bb1f83b329f41d928f8ce4a4b989b76da7c6216270c001e3c"], 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = creat(&(0x7f00000004c0)='./file1\x00', 0x105) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000500)={0x3, 0x21, 0x16, 0x6, 0xa, 0x400, 0x0, 0x3}) r6 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) ftruncate(r6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x4, 0xd, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0xb}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x20000}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x4d2, 0x3c}, 0x0, @in=@empty, 0x20, 0x4, 0x0, 0x1}}, 0xe8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r8, 0x0, r9) ppoll(&(0x7f0000000540)=[{r9, 0x22f5}], 0x1, &(0x7f00000005c0), &(0x7f0000000600)={[0x3ff]}, 0x8) sendmmsg(r7, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000180)={0x5, 0x8, 0x0, 0x2}, &(0x7f00000001c0)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000000), 0x10, r10}, 0x78) [ 3307.167826][ T5861] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3307.209551][ T5961] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3307.228135][ T5861] EXT4-fs (loop0): get root inode failed [ 3307.241918][ T5861] EXT4-fs (loop0): mount failed 10:08:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:06 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000045c4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:06 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a00000eff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3307.658282][ T6090] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3307.695758][ T6090] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3307.732852][ T6090] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:08:06 executing program 1: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000045a4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3307.781304][ T6091] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3307.867670][ T6090] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3307.902900][ T6090] EXT4-fs (loop0): get root inode failed 10:08:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0002f80000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3307.927763][ T6090] EXT4-fs (loop0): mount failed 10:08:06 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:06 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000045d4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:07 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a00000fff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3308.289578][ T6329] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3308.299993][ T6328] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3308.324908][ T6329] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:08:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3308.363025][ T6329] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3308.414984][ T6329] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3308.445470][ T6329] EXT4-fs (loop0): get root inode failed [ 3308.465450][ T6329] EXT4-fs (loop0): mount failed 10:08:07 executing program 1: unshare(0x20000400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x420200, 0x0) 10:08:07 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000045e4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:07 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ff0e53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3308.838689][ T6452] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3308.917483][ T6456] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 10:08:07 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newspdinfo={0x14, 0x24, 0x1}, 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:07 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000fd0000587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3308.958833][ T6456] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3308.975219][ T6456] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3309.030234][ T6456] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3309.058720][ T6565] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3309.084445][ T6571] selinux_nlmsg_perm: 6 callbacks suppressed [ 3309.084456][ T6571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6571 comm=syz-executor.1 10:08:08 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000045f4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3309.176553][ T6571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6571 comm=syz-executor.1 [ 3309.200113][ T6571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6571 comm=syz-executor.1 [ 3309.216115][ T6571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6571 comm=syz-executor.1 [ 3309.224907][ T6456] EXT4-fs (loop0): get root inode failed [ 3309.229919][ T6571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6571 comm=syz-executor.1 [ 3309.255932][ T6571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6571 comm=syz-executor.1 [ 3309.265432][ T6456] EXT4-fs (loop0): mount failed 10:08:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3309.269409][ T6571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6571 comm=syz-executor.1 [ 3309.290251][ T6571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6571 comm=syz-executor.1 10:08:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:08 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ff0f53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3309.316422][ T6571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6571 comm=syz-executor.1 [ 3309.330492][ T6571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6571 comm=syz-executor.1 10:08:08 executing program 1: getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/87, 0x57) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/167, 0xa7) clock_gettime(0x3, &(0x7f0000000400)) setitimer(0x2, &(0x7f0000000240)={{0x0, 0x2710}}, &(0x7f0000000300)) prlimit64(0x0, 0x1, &(0x7f0000000040)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x6e5008989ef5ad49}, 0x4000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1f, 0x1000}, 0x0, 0x6, 0xffffffffffffffff, 0x8) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100f6c0e65905a8778679600ef8e17cee25bd7100fddbdf250200000014000600fe804d5a634be452a9c500000000000000000000000000aa080000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4001881}, 0x0) unshare(0x40000000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x8, 0x2}, &(0x7f0000000380)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) timer_delete(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="0f24c78a1b0d8b399291bd8098f0c407d90990e04ea5783c6b95629ba7b1e10000000000000000", 0x27}], 0x1, 0xe) [ 3309.482329][ T6584] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3309.536366][ T6680] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3309.569434][ T6680] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:08:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3309.608781][ T6680] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3309.620693][ T6699] EXT4-fs (loop5): Invalid log cluster size: 67108865 10:08:08 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000604000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3309.712591][ T6680] EXT4-fs error (device loop0): ext4_fill_super:4518: inode #2: comm syz-executor.0: iget: root inode unallocated [ 3309.774488][ T6680] EXT4-fs (loop0): get root inode failed 10:08:08 executing program 1: r0 = open(0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) splice(r4, 0x0, r5, 0x0, 0x100000002, 0x0) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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"/289, 0x121}], 0x1, 0x6) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) readlinkat(r3, &(0x7f0000000140)='./bus\x00', &(0x7f0000000580)=""/224, 0xe0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x46000) lseek(r6, 0x4200, 0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r6, r9, 0x0, 0x8400fffffffb) syz_open_procfs(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) fadvise64(r0, 0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r10 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(0xffffffffffffffff, r10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x7e, &(0x7f0000000300)=""/126, 0x41100, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x7}, 0x10, r11}, 0x78) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 3309.816002][ T6680] EXT4-fs (loop0): mount failed 10:08:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:08 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff25ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:08 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3309.922000][ T6814] EXT4-fs (loop5): #blocks per group too big: 16480 10:08:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3310.111710][ T6823] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:09 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000004604000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) creat(0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) fchmod(r0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 10:08:09 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0xa}], 0x4801, 0x0) 10:08:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000003587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) [ 3310.342062][ T6941] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3310.486231][ T6954] EXT4-fs (loop5): Invalid log cluster size: 67108865 [ 3310.504977][ T6951] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:09 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x35}], 0x4801, 0x0) 10:08:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000340)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x40cc0, 0x0) write$evdev(r2, &(0x7f0000057fa0)=[{{0x0, 0x2710}, 0x0, 0x0, 0x10000}, {{0x77359400}}], 0x30) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) dup3(r3, r1, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000280)=""/166) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd86}}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x8}}, 0x10) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000400)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = getpid() getpgrp(r8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070000020000000001000045570000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055781309e339be593f7710aa00007c201700410000"], 0x70}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r10) splice(r9, 0x0, r10, 0x0, 0x100000002, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f00000003c0)) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 10:08:09 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000644000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3310.901775][ T7082] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 3310.919957][ T7078] EXT4-fs (loop5): #blocks per group too big: 16484 10:08:09 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:09 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x3e}], 0x4801, 0x0) 10:08:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3311.191110][ T7196] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:10 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000684000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:10 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x6c}], 0x4801, 0x0) 10:08:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3311.428886][ T7212] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:10 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x6d}], 0x4801, 0x0) 10:08:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, &(0x7f0000001000)=""/4087, 0xfffffffffffffeeb) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000005c0)={'syz', 0x1}, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) accept4(r0, &(0x7f0000000140)=@sco, &(0x7f0000000080)=0x80, 0x800) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0xa, 0xca1, 0x8, @remote, 0x5}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000001c0)="058aabc9181ea69644f1c273a018a8f9f4bcf1b05ec38147a9a73b14a9c96379a81fb513b00d1dbd6aa90ca0d4e0fada4e3c0f61c047ec", 0x37}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000000340)="fc7abdeab5a02a553b1f492564a8fd27dcd0e800466e4363cd0d155e8e395974eeb3a840caf8816163", 0x29}, {&(0x7f0000000380)="875b55a33469918eb6e1048082de336c57a3a6978810282f1a32d512ff4771bdf6930392e96c5cc2e49a805b0768db7399147659c44e56dd74e460137d1052d5eefcb2f3b253c910bef3005b90a0e6c10eaab9ffd5bd0422f2eaf6651cae8e3aa1a4488564cf06514fdb3053437cef622b8c3af3f4214ee2befd6f870f45c891dc2820e1c370e0ba14b2db0ff5a75ce47a607e1cf95fedfad1dfa632aec7dc7ce4631efa8af3484d765ca45946be04faabfadac235a72c326809e4b76a856352f67a9cef685760f4ed3f256456d7c61b816e5876fede000195c69d3596e4a3ef6c4996e4312dad65a227b94ef8", 0xed}, {&(0x7f0000000480)="40d85e1761f7223cce242efbcc42d5345ad372dffaf726bdaf861cd53352193f8e9adec762a0b2b0a71e556765c6a3388e529fe3dc2fd9aeb880b73ec946", 0x3e}, {&(0x7f0000000500)="589fde124635c1cd0d6591508fdd78b13ffffa5aae5fee8516e69ffd9abe08f089e3af46349c63cd67a4ec5862017b5fd876540edaa83e597c4daa6f22a80b86c8", 0x41}, {&(0x7f0000000580)="3a500e1442ca6ab3fb64b15c69048c94945aa80f21a5bb13b98cc6", 0x1b}, {&(0x7f0000000640)="557858ead0cce8f035fc6b1f8921619c86c000b63e4148b1414daa2e1dc24734442b18", 0x23}, {&(0x7f0000000680)}, {&(0x7f0000000780)="0a7473997296320d19d0ed2bce2531cf7a1160f03b025efe98509f7a225eb6a69b57216d40d2f522326f9b92ee97f5b102f4ad3a80e5b29aeae5a87c46e56955835df371b772735814c8f08eddedf44674fde90607f5ddc96b0b8d3e38e9b3b10516822e4453e70f7338b2505e1a9d979905023d3c3a7b9c5e9a1a8e4ee3d5f25e126b165c3e7f7caffa477c2f1171339f66ed6bb20ab3edad03ee2ae706774a8195874563462d1819d7c25244d2e826ca8ccf591e0570fe65360ac2712f8f4df1e0e09e9f895bd07b78fc34a9949dd2d28f6ffdc5d3c3c9daea72ce8d6f35", 0xdf}], 0xa, &(0x7f0000000940)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, [], [@pad1]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x4, 0x12, 0x1, 0x0, 0x0, [@empty, @dev={0xfe, 0x80, [], 0x2e}, @mcast1, @rand_addr="f9d79e25ad89272e67b3ab283ead4115", @dev={0xfe, 0x80, [], 0x35}, @empty, @empty, @ipv4={[], [], @rand_addr=0xa4b}, @rand_addr="caa379df70929d9ee03c8d33321fd9ea"]}}}], 0xc8}}, {{&(0x7f00000006c0)={0xa, 0x4e22, 0x1f, @mcast1, 0x8000}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="5d4d0988cc32039c9ccae5ee74394717fc4f337b3cf56f86d31eadc90b00bcb60832ce35a950abeeba56e173d13715a05e0c3e75749b473e25eaade5d4c19eb104dcaa9c9bd416e0420d90b9cb886a70993a4dec6ec45dabbde94d2e3fe5c243286e5993a39522f63f686d16b139ca420e25ed61af07203cc4cd1d773ad9", 0x7e}, {&(0x7f0000000ac0)="0f33bd896e7f03a75e580945a4361067b99be3d65e8b05a9306f4dec037d2576e21cf098e76b99a819e8d364417ed6ac505d11c0ab34082a391dbc8810c3cccef9c1faa1099f5c3bb15c7a5a48d69c1d326a176d815efe6b45afef395eabb423d6174ea8fc32d9d2e30b55d239e876abc94925", 0x73}, {&(0x7f0000000b40)="349e9e4f79ec6cc97fca9120702cc78be2dfa37c97bf4621d93404e961aa3a73d691bffc54890627df0cad512828767655396e0992728846a2205db52c281b081e62126aa96460140395a5813b5e7aa23d1cee56b87212f98764b5e2c11fc9196ac75180c86b1ce7840e30d353efab0198275947e748ce33a6191bcc6bfeb9f16076bb17685e2e68dbb341c4534f1bb92befb27b216564c1fe5dbd91c845cfd1c531bf7730cc98e909f88e8328b2307c9175a895a657af74acb4c3d3fdd13787f4f5789560d099ea12737e", 0xcb}, {&(0x7f0000000c40)="bd7007cbf314082e579d3202f1c527891bcc4e6e115a9ee3030ca3df9e074d439bb5395fde897412e188e362f1c6f33279be3da76bf83dbe661acf21c22542fd264779bec6cdb62c9795082c0ba6631369e0e7c60112f5a173731f46e052e29e470831c580421dbef578bca9b0273098ba14153575fb3cc5916131e1d0723d85", 0x80}], 0x4, &(0x7f0000000d00)=[@flowinfo={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x7f}}], 0x30}}], 0x2, 0x4044840) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='fd\x00') r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32], 0x4}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}}, 0x40880) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) eventfd2(0x2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000ec0)={0x5, 0x9, 0x0, 0x0, 0xc9}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000004c0)={0x0, 0x5, 0x7fffffff}) [ 3311.539901][ T7210] EXT4-fs (loop5): #blocks per group too big: 16488 10:08:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3311.676544][ T7226] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 3311.687877][ T7215] EXT4-fs (loop5): #blocks per group too big: 16488 10:08:10 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000006c4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:10 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x87}], 0x4801, 0x0) 10:08:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:10 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3311.942145][ T7340] EXT4-fs (loop5): #blocks per group too big: 16492 [ 3311.955523][ T7339] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:10 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x8a}], 0x4801, 0x0) [ 3312.132407][ T7350] EXT4-fs (loop5): #blocks per group too big: 16492 [ 3312.363018][ T7362] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) splice(r5, 0x0, r6, 0x0, 0x100000002, 0x0) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000300)={[0x5]}, 0x8) r7 = open(&(0x7f0000000240)='./file0\x00', 0x880, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) getpid() syz_open_procfs(0x0, 0x0) 10:08:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000007587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:08:11 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000744000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r3 = socket$inet6(0xa, 0x3, 0x100000001) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:11 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x8b}], 0x4801, 0x0) 10:08:11 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xffff}, 0x3c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r0, r1) creat(0x0, 0x0) 10:08:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3312.608543][ T7379] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:11 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x8c}], 0x4801, 0x0) 10:08:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x3, 0x300) accept4(r1, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0xfffffffffffffdf2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) open(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xa2a}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r6, 0x505, 0x0, 0x0, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev}]}, 0x20}}, 0x0) fadvise64(r5, 0x1ff, 0x1f, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) lchown(&(0x7f0000000040)='./file0\x00', 0x0, r9) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) chown(&(0x7f0000000000)='./file0\x00', r12, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, &(0x7f0000001840)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, r10}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000580), 0xefee) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 3312.693950][ T7374] EXT4-fs (loop5): #blocks per group too big: 16500 10:08:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3312.841664][ T7593] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:11 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x1181ae9845e0be6}, 0x10) fstat(r3, 0x0) ptrace(0x10, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x2, 0x8000, &(0x7f0000000140)="8864c01f28ac95c1b75c9a46552f90b4b6b43c6ff393e550135fab1c8944e4029c9118a9d84eb9e13c678374f241af67b2e7443a38908056a83ef0ca169c0df978eb31ea6a9dd18a3e5c471df111bb032e189ad8ec6e9593a3249745eaa0763d93968bec30d2df887fb7061a008ed7e7c1b01c71bd0f2bbf6ee5"}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0xffffffff, 0x0, 0x0, 0x1f, 0x5, 0xd97, 0x0, 0x9, 0xffffffffffffffff}}) wait4(0x0, 0x0, 0x0, 0x0) 10:08:11 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000002744000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:11 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x8d}], 0x4801, 0x0) 10:08:11 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3313.229152][ T7717] EXT4-fs (loop5): Invalid log cluster size: 33554433 [ 3313.237127][ T7714] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010005fba0000000000000000204ed9cd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000a5820724"], 0x28}}, 0x0) write$tun(r0, &(0x7f0000000200)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @echo_reply={0x11, 0x2b, 0x0, 0x0, 0x0, "77be3a04"}}}}, 0x2a) 10:08:12 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:12 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0xc0}], 0x4801, 0x0) 10:08:12 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000002754000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3313.409674][ T7827] EXT4-fs (loop5): Invalid log cluster size: 33554433 10:08:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3313.491412][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3313.503690][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 3313.513066][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 3313.533686][ T7837] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:12 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x110}], 0x4801, 0x0) [ 3313.543807][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3313.553548][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 3313.561836][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 3313.573573][ T7836] device sit5 left promiscuous mode [ 3313.595037][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3313.638614][ T7850] EXT4-fs (loop5): Invalid log cluster size: 33554433 10:08:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:12 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind(r0, &(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x3}}, 0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='bpf\x00', 0x20000, &(0x7f0000000540)={[{@mode={'mode', 0x3d, 0x80000001}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x12}}, {@mode={'mode', 0x3d, 0x7d}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x54}}, {@mode={'mode', 0x3d, 0xfff}}], [{@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x3, r1, 0x0, 0xffffffffffffffdb) keyctl$set_timeout(0xf, r1, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)='$.6/%cpuset]\x00', r1) keyctl$set_timeout(0xf, r1, 0x7) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c99612c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6e66735f6578706f72743d6f6e2c696e6465783d6f6e2c00"]) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = dup2(0xffffffffffffffff, r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xfffffffb, 0x9, 0x9, 0x10001}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x50801}, 0x20000804) [ 3313.794910][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3313.804188][ T7957] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:12 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000007a4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:12 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:12 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x140}], 0x4801, 0x0) 10:08:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3313.934110][ T7967] overlayfs: failed to resolve './fil™a': -2 [ 3314.044588][ T7973] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3314.200142][ T7974] EXT4-fs (loop5): #blocks per group too big: 16506 10:08:13 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x17f}], 0x4801, 0x0) 10:08:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:13 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3314.348263][ T8094] EXT4-fs (loop5): #blocks per group too big: 16506 10:08:13 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000017e4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3314.483775][ T8120] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:13 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x180}], 0x4801, 0x0) [ 3314.777777][ T8217] EXT4-fs (loop5): Invalid log cluster size: 16777217 10:08:13 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3314.962947][ T8226] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:13 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000027e4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:14 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x1c0}], 0x4801, 0x0) 10:08:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000c587dfd6b3cb9b151a55f65f44a5d203d4726e71f8b3db37f6c3f00d9ded740a12bbf09525d05e9b4852ecb5284707ba06b45a5d1c40ec125940fd0a80aeb822c0e9b9bbf22c4e755b61cdb09711a07ec331061c20d468fd1a73c3cbc0a74d301d80663486ee9403901725db0c37eb51ab91bb9475832bca0aec3492154d428430a935ebf1cd661713c53de3534a4f9e0bb6fcfc86b79ab7efad1e6f5269c43d18fc33742fe137656744551a51a767a60535fe18d4a082cc938c6ce670920b311b6411cd8dcb4c795ede237a769573b2ce5f0dcf0884cb85a0ea7b78350298b095efb4433ac808e6c1121ccd9fbfa1f77911dfb97f0ccf4870a11324c0c4e68d2c7cd32a648287aa61d7d3b697a076fa862f2abdf2fd8127004b9577f872db89bbd4116fd2089aca661b1cc40e24e0be4d4e65ff72987726d6f12a18fcbf60724a26105c412bdb88940363d462defedf07ba575ac7dae8ffd15a93fd2a0a0cc1562c14c95da01d45e269125d860a9f4b5c35868f220a82b1b68d98b20b1da2d959aa3af4c098bf22683e4241c2b67b7c44114b9821f85c172695c033cc435b4b71afd6a5f2feb8f2e0f7f59861a8309b429bddfb1d4ec8e387725c9b4c7e3d225ecdf22e160df70fe154112f774126a5d6a8e5af570c044472b21b90876dc52f233445b239709a9925c4769a11e06bfafe79f001226ac245d5487403db0ad52e9148dd9240b4b62958c3f16efad582a020996b74716c9c221cef66687f73036441a557a69aca10f4536a86b06a6ed6f3a4837496752abddab1e4b01078a82ecf0a99d75153dedd7050499b9f152c0caff4cba9c246de134fe0e20cce421485f0c01403f31bb42856b0f5961a61071792738a2c8c50fe4"], 0x28}}, 0x0) 10:08:14 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:14 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3315.235678][ T8343] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 3315.292497][ T8339] EXT4-fs (loop5): Invalid log cluster size: 33554433 10:08:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:14 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x240}], 0x4801, 0x0) [ 3315.525394][ T8393] EXT4-fs (loop5): Invalid log cluster size: 33554433 10:08:14 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000017f4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3315.566771][ T8462] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:14 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) mmap(&(0x7f0000378000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, r1, 0x2ee6c000) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:08:14 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x274}], 0x4801, 0x0) 10:08:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3315.866909][ T8490] EXT4-fs (loop5): Invalid log cluster size: 16777217 [ 3315.897331][ T8582] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:14 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:14 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=""/45}, 0x20) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x5, 0x1, 0xac9, 0x80}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) flock(r3, 0x2) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002540)={'hsr0\x00', 0x43732e53b8416f1a}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002540)={'hsr0\x00', 0x43732e53b8416f1a}) 10:08:14 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x280}], 0x4801, 0x0) 10:08:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:14 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000027f4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3316.142709][ T8603] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 3316.266812][ T8599] EXT4-fs (loop5): Invalid log cluster size: 33554433 10:08:15 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:15 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x2a8}], 0x4801, 0x0) 10:08:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3316.397330][ T8712] EXT4-fs (loop5): Invalid log cluster size: 33554433 10:08:15 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000002804000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f00000001c0)=@random={'trusted.', 'keyring-\x00'}, &(0x7f0000000240)='\x93.:@system\x00', 0xb, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x27f9, 0x0, 0x4, 0x3, 0x6, "9dfc1b467d431fee99a0e2a2859bd59764f160", 0x3}) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000180), 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) pipe(&(0x7f0000000080)) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000300)=0x9, 0x4) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="000ffff08073b9369ce73cb6bddb27ea6235115750e987940bb252dd444d87aec5fefee1ae2614e04208e388db8f29eac0d2477803226d590c6ea7e7e940d331f3c94a43dc907e80bf28612c92fb169c445bd9ac69bc78a8bc4340331c64cffc52d39e4e85718670a0f229cefe56bdc8ac095d65"], 0x15) sendfile(r3, r1, 0x0, 0xa198) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x1000, 0x9, 0xa3e, 0x1000}, 0x20, [0x2e0, 0x6, 0x200, 0xffffff61, 0xffffffff, 0x41, 0x7ff, 0x2400, 0x8, 0x8, 0x100, 0xae8, 0x5, 0x1, 0x4, 0x3, 0x0, 0x1, 0x7, 0x7, 0x0, 0x7f, 0x4, 0x9, 0x6, 0x20, 0x5, 0x8, 0xffffffff, 0x7fffffff, 0x780, 0x2, 0x9, 0x32, 0x4, 0x7, 0x20, 0x2, 0x7fff, 0x0, 0xffffff43, 0x6, 0x5, 0x0, 0x3, 0x3, 0x7fff, 0x2786, 0x3, 0x3ff, 0xffff, 0x3, 0x1833, 0x6, 0x4, 0x5, 0x9, 0x7fff, 0x5, 0x80000001, 0x8, 0x3, 0x2, 0x4], [0x3, 0x0, 0x8001, 0x4e1, 0x2, 0x4f6e5985, 0x75a55ce6, 0x9, 0x8001, 0x121, 0x0, 0x1, 0xae73, 0x80000000, 0xff, 0x5, 0x7, 0x401, 0xfffffbae, 0x6, 0x10000, 0xffff0000, 0x0, 0x81, 0x49, 0x2, 0xac57, 0x3ff, 0x9, 0x5, 0x38f, 0x101, 0x661, 0x0, 0x80000001, 0x0, 0x9, 0xffffff88, 0x8, 0x7fff, 0xbd24, 0x4, 0x0, 0x1, 0xff, 0x3, 0x8, 0x3ff, 0x7, 0x101, 0x6, 0x4912, 0x0, 0x7, 0x0, 0x207f, 0x80, 0x400, 0x4, 0x8, 0x9, 0x9, 0x3, 0x10000], [0x6, 0x4, 0x2, 0xb4, 0xfb6, 0xffff, 0x0, 0x3, 0x6, 0x1, 0x7f, 0x7fffffff, 0x0, 0x1, 0x7, 0x3ff, 0x4, 0x40, 0x3f, 0x4, 0x3, 0x5, 0x1, 0x800, 0x1b0, 0x3ff, 0x546d4643, 0x3c, 0xffff, 0x7fff, 0x8, 0x7, 0x4, 0x1000, 0x81, 0x9, 0x2, 0x9, 0xffff8001, 0x7fffffff, 0x8, 0x0, 0x0, 0x1ff, 0x20, 0xc6d, 0x4, 0x0, 0x1, 0x401, 0x7fffffff, 0x8000000, 0x3, 0x6, 0x1ff, 0x0, 0x1f5f, 0x6, 0x8, 0x5, 0x7fff, 0x3ff, 0x0, 0x9], [0x9, 0x80000000, 0xfffffffa, 0x2, 0x470a51aa, 0x415f, 0x80, 0x10000, 0x8, 0x80000000, 0x7, 0x7, 0x74, 0xfff, 0x7, 0x1, 0x7, 0x9, 0xfff, 0x3, 0x0, 0x5, 0x607, 0x31d6, 0x8, 0x0, 0xd583, 0x5, 0x9, 0xffffff81, 0x8000, 0x9, 0x9, 0x1b, 0x1000, 0x7, 0x8000, 0xfffffc00, 0x2, 0x4, 0x7, 0x3, 0x80000001, 0x3, 0x1f, 0x1f, 0x200, 0x0, 0x1000, 0xfffffff8, 0x40, 0x1, 0xfbc3987, 0x100, 0x0, 0xf14, 0x8001, 0x0, 0x9, 0x3, 0x5, 0x9, 0x4a5c68ec, 0x60fb6497]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 3316.570087][ T8717] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:15 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x2a9}], 0x4801, 0x0) 10:08:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 3316.842939][ T8774] EXT4-fs (loop5): Invalid log cluster size: 33554433 10:08:15 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:15 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3317.047804][ T8774] EXT4-fs (loop5): Invalid log cluster size: 33554433 [ 3317.055546][ T8841] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:16 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000001814000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:16 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x2c0}], 0x4801, 0x0) [ 3317.475381][ T8900] EXT4-fs (loop5): Invalid log cluster size: 16777217 10:08:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:16 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:16 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 3317.577057][ T8967] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:16 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x2c5}], 0x4801, 0x0) 10:08:16 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000002814000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:16 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:08:16 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000008000, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x294421, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="300008000706010800000000000000000000000a0900020073797a3000000000a0000140070000000800064000000000b496109f60b12d8c"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x8080fffffffe) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000140)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r1, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3318.015862][ T9081] EXT4-fs (loop5): Invalid log cluster size: 33554433 [ 3318.038078][ T9091] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:17 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x300}], 0x4801, 0x0) 10:08:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x0, 0x0) pipe(&(0x7f0000001d40)={0xffffffffffffffff}) fremovexattr(0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x7f17df10ee5c5bc2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba95568b386cfca9790ad90000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 10:08:17 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c0880000000000001000000010000018a4000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 10:08:17 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x2004049, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x501040, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000308ec57ca73a8"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40000) 10:08:17 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'veth0_vlan\x00', 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x100000001) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 10:08:17 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6020920000142f00fe8004000000000000000000000000bbfe8000000000000000000000000000aa00000400", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) [ 3318.455489][ T9215] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:08:17 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x983, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000c00e60100006c088000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x340}], 0x4801, 0x0) [ 3318.525170][ T9222] EXT4-fs (loop5): Invalid log cluster size: 16777217 [ 3318.547033][ T9332] ================================================================== [ 3318.555604][ T9332] BUG: KASAN: use-after-free in do_xdp_generic+0x612/0x1500 [ 3318.562997][ T9332] Read of size 8 at addr ffff888069d537ff by task syz-executor.1/9332 [ 3318.571503][ T9332] [ 3318.574179][ T9332] CPU: 1 PID: 9332 Comm: syz-executor.1 Not tainted 5.4.18-syzkaller-00113-g9204f620c2a9 #0 [ 3318.584671][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3318.594992][ T9332] Call Trace: [ 3318.598544][ T9332] dump_stack+0x1b0/0x228 [ 3318.603138][ T9332] ? show_regs_print_info+0x18/0x18 [ 3318.608447][ T9332] ? vprintk_func+0x105/0x110 [ 3318.613143][ T9332] ? printk+0xc0/0x109 [ 3318.617242][ T9332] print_address_description+0x96/0x5d0 [ 3318.622931][ T9332] ? devkmsg_release+0x127/0x127 [ 3318.628123][ T9332] ? kasan_slab_alloc+0xe/0x10 [ 3318.633224][ T9332] ? pskb_expand_head+0x256/0x10f0 [ 3318.638492][ T9332] __kasan_report+0x14b/0x1c0 [ 3318.643280][ T9332] ? do_xdp_generic+0x612/0x1500 [ 3318.648326][ T9332] kasan_report+0x26/0x50 [ 3318.652771][ T9332] __asan_report_load8_noabort+0x14/0x20 [ 3318.658607][ T9332] do_xdp_generic+0x612/0x1500 [ 3318.663523][ T9332] ? __kasan_check_write+0x14/0x20 [ 3318.669002][ T9332] ? _copy_from_iter+0x886/0xaa0 [ 3318.674008][ T9332] ? generic_xdp_tx+0x4f0/0x4f0 [ 3318.678950][ T9332] ? tun_get_user+0x3d10/0x3d10 [ 3318.683823][ T9332] tun_get_user+0x2498/0x3d10 [ 3318.688521][ T9332] ? tun_do_read+0x1f10/0x1f10 [ 3318.693492][ T9332] ? __rcu_read_lock+0x50/0x50 [ 3318.698458][ T9332] ? avc_has_extended_perms+0xb27/0x10d0 [ 3318.704211][ T9332] ? __rcu_read_lock+0x50/0x50 [ 3318.709117][ T9332] tun_chr_write_iter+0x134/0x1c0 [ 3318.714387][ T9332] do_iter_readv_writev+0x5fa/0x890 [ 3318.719823][ T9332] ? vfs_dedupe_file_range+0xa00/0xa00 [ 3318.725693][ T9332] ? security_file_permission+0x157/0x350 [ 3318.731449][ T9332] ? rw_verify_area+0x1c2/0x360 [ 3318.736354][ T9332] do_iter_write+0x180/0x590 [ 3318.741239][ T9332] ? do_writev+0x9e/0x560 [ 3318.745759][ T9332] do_writev+0x2cd/0x560 [ 3318.750013][ T9332] ? do_readv+0x400/0x400 [ 3318.754590][ T9332] ? __kasan_check_read+0x11/0x20 [ 3318.759776][ T9332] ? _copy_to_user+0x92/0xb0 [ 3318.764722][ T9332] ? put_timespec64+0x106/0x150 [ 3318.770066][ T9332] ? ktime_get_raw+0x130/0x130 [ 3318.775023][ T9332] ? get_timespec64+0x1c0/0x1c0 [ 3318.780370][ T9332] ? __kasan_check_read+0x11/0x20 [ 3318.786375][ T9332] ? __ia32_sys_clock_settime+0x230/0x230 [ 3318.792124][ T9332] __x64_sys_writev+0x7d/0x90 [ 3318.796817][ T9332] do_syscall_64+0xc0/0x100 [ 3318.801339][ T9332] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3318.807934][ T9332] RIP: 0033:0x45b251 [ 3318.811849][ T9332] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 3318.831775][ T9332] RSP: 002b:00007fbe88aa7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 3318.840468][ T9332] RAX: ffffffffffffffda RBX: 000000000000004a RCX: 000000000045b251 [ 3318.848614][ T9332] RDX: 0000000000000001 RSI: 00007fbe88aa7c00 RDI: 00000000000000f0 [ 3318.857127][ T9332] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3318.865463][ T9332] R10: 00007fbe88aa89d0 R11: 0000000000000293 R12: 00000000ffffffff [ 3318.873921][ T9332] R13: 0000000000000b7b R14: 00000000004cc5b2 R15: 000000000075bf2c [ 3318.882178][ T9332] [ 3318.884514][ T9332] The buggy address belongs to the page: [ 3318.890423][ T9332] page:ffffea0001a754c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 3318.900117][ T9332] raw: 4000000000000000 ffffea0001a754c8 ffffea0001a754c8 0000000000000000 [ 3318.909073][ T9332] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 3318.917803][ T9332] page dumped because: kasan: bad access detected [ 3318.924569][ T9332] [ 3318.926906][ T9332] Memory state around the buggy address: [ 3318.932679][ T9332] ffff888069d53680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 3318.941102][ T9332] ffff888069d53700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 3318.949295][ T9332] >ffff888069d53780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 3318.957631][ T9332] ^ [ 3318.965853][ T9332] ffff888069d53800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 3318.974896][ T9332] ffff888069d53880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 3318.983466][ T9332] ================================================================== [ 3318.991632][ T9332] Disabling lock debugging due to kernel taint [ 3318.998386][ T9332] ------------[ cut here ]------------ [ 3319.003991][ T9332] Illegal XDP return value 4294967274, expect packet loss! [ 3319.011477][ T9332] WARNING: CPU: 1 PID: 9332 at net/core/filter.c:6907 bpf_warn_invalid_xdp_action+0x5a/0x60 [ 3319.021634][ T9332] Modules linked in: [ 3319.025822][ T9332] CPU: 1 PID: 9332 Comm: syz-executor.1 Tainted: G B 5.4.18-syzkaller-00113-g9204f620c2a9 #0 [ 3319.037753][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3319.052649][ T9332] RIP: 0010:bpf_warn_invalid_xdp_action+0x5a/0x60 [ 3319.059302][ T9332] Code: e8 4b 12 5f fe 83 fb 04 48 c7 c0 eb 65 56 84 48 c7 c6 f3 65 56 84 48 0f 47 f0 48 c7 c7 be 65 56 84 89 da 31 c0 e8 56 eb 35 fe <0f> 0b eb bc 66 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 50 4c 89 [ 3319.079967][ T9332] RSP: 0018:ffff88818d5f7668 EFLAGS: 00010246 [ 3319.090225][ T9332] RAX: d1ddbba94dde9100 RBX: 00000000ffffffea RCX: 0000000000040000 [ 3319.098442][ T9332] RDX: ffffc900009f0000 RSI: 00000000000351b5 RDI: 00000000000351b6 [ 3319.106611][ T9332] RBP: ffff88818d5f7670 R08: ffffffff812cf880 R09: 0000000000000003 [ 3319.114819][ T9332] R10: ffffed1031abee39 R11: 0000000000000004 R12: dffffc0000000000 [ 3319.122991][ T9332] R13: 00000000ffffffea R14: dffffc0000000000 R15: ffff88816ae4d140 [ 3319.131271][ T9332] FS: 00007fbe88aa8700(0000) GS:ffff8881dbb00000(0000) knlGS:0000000000000000 [ 3319.140220][ T9332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3319.146975][ T9332] CR2: 0000000000758080 CR3: 00000001a214a003 CR4: 00000000001606e0 [ 3319.155061][ T9332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3319.163250][ T9332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 3319.171244][ T9332] Call Trace: [ 3319.174552][ T9332] do_xdp_generic+0xd2d/0x1500 [ 3319.179514][ T9332] ? generic_xdp_tx+0x4f0/0x4f0 [ 3319.184566][ T9332] ? tun_get_user+0x3d10/0x3d10 [ 3319.190430][ T9332] tun_get_user+0x2498/0x3d10 [ 3319.195366][ T9332] ? tun_do_read+0x1f10/0x1f10 [ 3319.201338][ T9332] ? __rcu_read_lock+0x50/0x50 [ 3319.206204][ T9332] ? avc_has_extended_perms+0xb27/0x10d0 [ 3319.211868][ T9332] ? __rcu_read_lock+0x50/0x50 [ 3319.216789][ T9332] tun_chr_write_iter+0x134/0x1c0 [ 3319.221992][ T9332] do_iter_readv_writev+0x5fa/0x890 [ 3319.228379][ T9332] ? vfs_dedupe_file_range+0xa00/0xa00 [ 3319.233974][ T9332] ? security_file_permission+0x157/0x350 [ 3319.240193][ T9332] ? rw_verify_area+0x1c2/0x360 [ 3319.245165][ T9332] do_iter_write+0x180/0x590 [ 3319.250077][ T9332] ? do_writev+0x9e/0x560 [ 3319.254430][ T9332] do_writev+0x2cd/0x560 [ 3319.258789][ T9332] ? do_readv+0x400/0x400 [ 3319.263402][ T9332] ? __kasan_check_read+0x11/0x20 [ 3319.268976][ T9332] ? _copy_to_user+0x92/0xb0 [ 3319.273956][ T9332] ? put_timespec64+0x106/0x150 [ 3319.278954][ T9332] ? ktime_get_raw+0x130/0x130 [ 3319.284087][ T9332] ? get_timespec64+0x1c0/0x1c0 [ 3319.289095][ T9332] ? __kasan_check_read+0x11/0x20 [ 3319.294153][ T9332] ? __ia32_sys_clock_settime+0x230/0x230 [ 3319.299904][ T9332] __x64_sys_writev+0x7d/0x90 [ 3319.304777][ T9332] do_syscall_64+0xc0/0x100 [ 3319.309467][ T9332] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3319.315393][ T9332] RIP: 0033:0x45b251 [ 3319.319301][ T9332] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 3319.339616][ T9332] RSP: 002b:00007fbe88aa7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 3319.348201][ T9332] RAX: ffffffffffffffda RBX: 000000000000004a RCX: 000000000045b251 [ 3319.356591][ T9332] RDX: 0000000000000001 RSI: 00007fbe88aa7c00 RDI: 00000000000000f0 [ 3319.364775][ T9332] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3319.372845][ T9332] R10: 00007fbe88aa89d0 R11: 0000000000000293 R12: 00000000ffffffff [ 3319.380841][ T9332] R13: 0000000000000b7b R14: 00000000004cc5b2 R15: 000000000075bf2c [ 3319.389020][ T9332] ---[ end trace c7136073c3fe0b4d ]--- [ 3319.399779][ T9332] BUG: unable to handle page fault for address: ffffed1019655eff [ 3319.407777][ T9332] #PF: supervisor read access in kernel mode [ 3319.416346][ T9332] #PF: error_code(0x0000) - not-present page [ 3319.422348][ T9332] PGD 21fff7067 P4D 21fff7067 PUD 21fff6067 PMD 0 [ 3319.428992][ T9332] Oops: 0000 [#1] PREEMPT SMP KASAN [ 3319.434212][ T9332] CPU: 1 PID: 9332 Comm: syz-executor.1 Tainted: G B W 5.4.18-syzkaller-00113-g9204f620c2a9 #0 [ 3319.445753][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3319.456179][ T9332] RIP: 0010:do_xdp_generic+0x603/0x1500 [ 3319.461743][ T9332] Code: 00 00 00 00 fc ff df 42 80 3c 30 00 74 05 e8 c4 7a 96 fe 4c 89 a4 24 d8 00 00 00 4c 89 ac 24 18 01 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 08 4c 89 ff e8 fe 79 96 fe 49 8b 37 83 e6 01 31 [ 3319.481861][ T9332] RSP: 0018:ffff88818d5f7680 EFLAGS: 00010a07 [ 3319.487955][ T9332] RAX: 1ffff11019655eff RBX: ffff88818d5f7788 RCX: 1ffff11031abeef1 [ 3319.496557][ T9332] RDX: ffff88816ae4d074 RSI: 00000000000000cb RDI: ffff88818d5f7798 [ 3319.504953][ T9332] RBP: ffff88818d5f7830 R08: ffffffff82da5f9b R09: ffffed1039653f5d [ 3319.512984][ T9332] R10: ffffed1039653f5d R11: 0000000000000000 R12: ffff8880cb29f94a [ 3319.520968][ T9332] R13: ffff8881cb29f800 R14: dffffc0000000000 R15: ffff8880cb2af7ff [ 3319.528954][ T9332] FS: 00007fbe88aa8700(0000) GS:ffff8881dbb00000(0000) knlGS:0000000000000000 [ 3319.538074][ T9332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3319.544679][ T9332] CR2: ffffed1019655eff CR3: 00000001a214a005 CR4: 00000000001606e0 [ 3319.553026][ T9332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3319.561440][ T9332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 3319.569440][ T9332] Call Trace: [ 3319.572840][ T9332] ? __kasan_check_write+0x14/0x20 [ 3319.577963][ T9332] ? _copy_from_iter+0x886/0xaa0 [ 3319.583008][ T9332] ? generic_xdp_tx+0x4f0/0x4f0 [ 3319.588006][ T9332] ? tun_get_user+0x3d10/0x3d10 [ 3319.592886][ T9332] tun_get_user+0x2498/0x3d10 [ 3319.597936][ T9332] ? unwind_get_return_address+0x4c/0x90 [ 3319.603912][ T9332] ? tun_do_read+0x1f10/0x1f10 [ 3319.608783][ T9332] ? do_futex+0x2416/0x3f90 [ 3319.613304][ T9332] ? stack_trace_save+0x111/0x1e0 [ 3319.618584][ T9332] ? stack_trace_snprint+0x150/0x150 [ 3319.624039][ T9332] ? avc_has_extended_perms+0xb27/0x10d0 [ 3319.629840][ T9332] ? __rcu_read_lock+0x50/0x50 [ 3319.634797][ T9332] ? futex_exit_release+0xd0/0xd0 [ 3319.640059][ T9332] ? putname+0xe5/0x140 [ 3319.644320][ T9332] ? __kasan_slab_free+0x1e2/0x220 [ 3319.649673][ T9332] tun_chr_write_iter+0x134/0x1c0 [ 3319.654997][ T9332] do_iter_readv_writev+0x5fa/0x890 [ 3319.660482][ T9332] ? vfs_dedupe_file_range+0xa00/0xa00 [ 3319.665969][ T9332] ? security_file_permission+0x157/0x350 [ 3319.671825][ T9332] ? rw_verify_area+0x1c2/0x360 [ 3319.676705][ T9332] do_iter_write+0x180/0x590 [ 3319.681630][ T9332] ? do_writev+0x9e/0x560 [ 3319.686208][ T9332] do_writev+0x2cd/0x560 [ 3319.690646][ T9332] ? kasan_slab_free+0xe/0x10 [ 3319.695621][ T9332] ? do_readv+0x400/0x400 [ 3319.700309][ T9332] ? __kasan_check_read+0x11/0x20 [ 3319.705353][ T9332] ? _copy_to_user+0x92/0xb0 [ 3319.710285][ T9332] ? put_timespec64+0x106/0x150 [ 3319.715154][ T9332] ? ktime_get_raw+0x130/0x130 [ 3319.720067][ T9332] ? get_timespec64+0x1c0/0x1c0 [ 3319.724934][ T9332] ? __kasan_check_read+0x11/0x20 [ 3319.729972][ T9332] ? __ia32_sys_clock_settime+0x230/0x230 [ 3319.736102][ T9332] __x64_sys_writev+0x7d/0x90 [ 3319.741024][ T9332] do_syscall_64+0xc0/0x100 [ 3319.745561][ T9332] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3319.751466][ T9332] RIP: 0033:0x45b251 [ 3319.755595][ T9332] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 3319.775985][ T9332] RSP: 002b:00007fbe88aa7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 3319.784782][ T9332] RAX: ffffffffffffffda RBX: 000000000000004a RCX: 000000000045b251 [ 3319.793297][ T9332] RDX: 0000000000000001 RSI: 00007fbe88aa7c00 RDI: 00000000000000f0 [ 3319.801689][ T9332] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3319.810003][ T9332] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000ffffffff [ 3319.818112][ T9332] R13: 0000000000000b7b R14: 00000000004cc5b2 R15: 000000000075bf2c [ 3319.826667][ T9332] Modules linked in: [ 3319.830586][ T9332] CR2: ffffed1019655eff [ 3319.834762][ T9332] ---[ end trace c7136073c3fe0b4e ]--- [ 3319.840584][ T9332] RIP: 0010:do_xdp_generic+0x603/0x1500 [ 3319.846394][ T9332] Code: 00 00 00 00 fc ff df 42 80 3c 30 00 74 05 e8 c4 7a 96 fe 4c 89 a4 24 d8 00 00 00 4c 89 ac 24 18 01 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 08 4c 89 ff e8 fe 79 96 fe 49 8b 37 83 e6 01 31 [ 3319.866192][ T9332] RSP: 0018:ffff88818d5f7680 EFLAGS: 00010a07 [ 3319.872272][ T9332] RAX: 1ffff11019655eff RBX: ffff88818d5f7788 RCX: 1ffff11031abeef1 [ 3319.880383][ T9332] RDX: ffff88816ae4d074 RSI: 00000000000000cb RDI: ffff88818d5f7798 [ 3319.888654][ T9332] RBP: ffff88818d5f7830 R08: ffffffff82da5f9b R09: ffffed1039653f5d [ 3319.896894][ T9332] R10: ffffed1039653f5d R11: 0000000000000000 R12: ffff8880cb29f94a [ 3319.905367][ T9332] R13: ffff8881cb29f800 R14: dffffc0000000000 R15: ffff8880cb2af7ff [ 3319.913442][ T9332] FS: 00007fbe88aa8700(0000) GS:ffff8881dbb00000(0000) knlGS:0000000000000000 [ 3319.922537][ T9332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3319.929503][ T9332] CR2: ffffed1019655eff CR3: 00000001a214a005 CR4: 00000000001606e0 [ 3319.937488][ T9332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3319.945720][ T9332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 3319.953883][ T9332] Kernel panic - not syncing: Fatal exception in interrupt [ 3319.962314][ T9332] Kernel Offset: disabled [ 3319.966779][ T9332] Rebooting in 86400 seconds..