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") 20:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2}) 20:46:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0x40086203, 0x0) 20:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) [ 1945.451831][ T3902] loop2: detected capacity change from 0 to 128 20:46:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) (async) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x2) (async) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0x40086203, 0x0) [ 1945.504824][ T3902] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1945.538007][ T3902] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 20:46:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r6}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0x40086203, 0x0) [ 1945.602691][ T3902] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1945.635834][ T3902] EXT4-fs (loop2): get root inode failed [ 1945.643757][ T3902] EXT4-fs (loop2): mount failed 20:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 20:46:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1484, 0x4284c0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, r2}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r5}) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r14, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r15, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r14, 0xc06864ce, &(0x7f00000000c0)={r16, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r14, 0xc008640a, &(0x7f0000000040)={r17}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000300)={r3, 0x707, 0x1f, 0x0, 0x2, [0x0, r12, r13, r17], [0x9, 0x3, 0x800, 0x5], [0xf2, 0x3, 0x5, 0x5], [0x8000, 0xe0, 0xfe, 0x101]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r18, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r19, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r20}) 20:46:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)) 20:46:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x9}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540), 0x591080, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000180)={0xcc, &(0x7f0000000200)="f368ebb613e787724bc2f364a6bd367db4b48e5539ceae3b42fcac7f9e3b344f97c6aedd38fce3c71b32e1b493d73911c7cf3db30ad84672d674e5674cba4500a659dace0fb101a1849132f6e3e77745ec6c3fdf45bcff9f100735286b54055ab755a5fdfa4e2e0aafa1be0279fb536d23288b80ffca06e562342a0f587a0c523d3b4cbcb721dbf61f6e6b45d1c61e9a754ed30f82baa90b89d122a7779a28a45898fb4a8809ef95b0cf63a1a1ab8e89a7101d4894cb7683a586d68603845cbb0c98d880560c6391fc144ce2"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r7, r7, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x6, 0x4}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000018", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653100"]) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000900)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x4, 0x7, 0x0, r8}) 20:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)) 20:46:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) (async) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1484, 0x4284c0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, r2}) (async) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r5}) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r14, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r15, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r14, 0xc06864ce, &(0x7f00000000c0)={r16, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r14, 0xc008640a, &(0x7f0000000040)={r17}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000300)={r3, 0x707, 0x1f, 0x0, 0x2, [0x0, r12, r13, r17], [0x9, 0x3, 0x800, 0x5], [0xf2, 0x3, 0x5, 0x5], [0x8000, 0xe0, 0xfe, 0x101]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r18, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r19, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r20}) [ 1945.871383][ T3921] loop2: detected capacity change from 0 to 128 [ 1945.922567][ T3921] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1945.966588][ T3921] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1945.998857][ T3921] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)) [ 1946.020496][ T3921] EXT4-fs (loop2): get root inode failed [ 1946.048041][ T3921] EXT4-fs (loop2): mount failed 20:46:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x9}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540), 0x591080, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000180)={0xcc, &(0x7f0000000200)="f368ebb613e787724bc2f364a6bd367db4b48e5539ceae3b42fcac7f9e3b344f97c6aedd38fce3c71b32e1b493d73911c7cf3db30ad84672d674e5674cba4500a659dace0fb101a1849132f6e3e77745ec6c3fdf45bcff9f100735286b54055ab755a5fdfa4e2e0aafa1be0279fb536d23288b80ffca06e562342a0f587a0c523d3b4cbcb721dbf61f6e6b45d1c61e9a754ed30f82baa90b89d122a7779a28a45898fb4a8809ef95b0cf63a1a1ab8e89a7101d4894cb7683a586d68603845cbb0c98d880560c6391fc144ce2"}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async, rerun: 32) sendfile(r7, r7, &(0x7f0000000040)=0x3f00, 0x7fff) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x6, 0x4}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000018", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653100"]) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000900)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x4, 0x7, 0x0, r8}) 20:46:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1484, 0x4284c0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, r2}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r5}) (async) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r14, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r15, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r14, 0xc06864ce, &(0x7f00000000c0)={r16, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r14, 0xc008640a, &(0x7f0000000040)={r17}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000300)={r3, 0x707, 0x1f, 0x0, 0x2, [0x0, r12, r13, r17], [0x9, 0x3, 0x800, 0x5], [0xf2, 0x3, 0x5, 0x5], [0x8000, 0xe0, 0xfe, 0x101]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r18, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r19, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r20}) 20:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x8, 0x1, 0xa}) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[r2, 0x0, r3, r6], 0x4, 0x80000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r9}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f00000000c0)={r12, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r13}) 20:46:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") [ 1946.256838][ T3941] loop2: detected capacity change from 0 to 128 [ 1946.322761][ T3941] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) [ 1946.375819][ T3941] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x9}) (async, rerun: 32) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540), 0x591080, 0x0) (rerun: 32) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000180)={0xcc, &(0x7f0000000200)="f368ebb613e787724bc2f364a6bd367db4b48e5539ceae3b42fcac7f9e3b344f97c6aedd38fce3c71b32e1b493d73911c7cf3db30ad84672d674e5674cba4500a659dace0fb101a1849132f6e3e77745ec6c3fdf45bcff9f100735286b54055ab755a5fdfa4e2e0aafa1be0279fb536d23288b80ffca06e562342a0f587a0c523d3b4cbcb721dbf61f6e6b45d1c61e9a754ed30f82baa90b89d122a7779a28a45898fb4a8809ef95b0cf63a1a1ab8e89a7101d4894cb7683a586d68603845cbb0c98d880560c6391fc144ce2"}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r7, r7, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x6, 0x4}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000018", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653100"]) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000900)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x4, 0x7, 0x0, r8}) [ 1946.420535][ T3941] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1946.436598][ T3941] EXT4-fs (loop2): get root inode failed [ 1946.442259][ T3941] EXT4-fs (loop2): mount failed 20:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000200), 0x62e, 0x600000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f00000002c0)={r9}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r10}) 20:46:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000380)='./file0\x00') r2 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x54401, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000003c0)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, r5}) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r7}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r5, 0xb8, &(0x7f0000000080)=""/184}) 20:46:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) [ 1946.639683][ T3954] loop2: detected capacity change from 0 to 128 [ 1946.655375][ T3954] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000200), 0x62e, 0x600000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f00000002c0)={r9}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r10}) [ 1946.704183][ T3954] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) [ 1946.762913][ T3954] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:44 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000380)='./file0\x00') r2 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x54401, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x54401, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000003c0)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, r5}) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r7}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r5, 0xb8, &(0x7f0000000080)=""/184}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r5, 0xb8, &(0x7f0000000080)=""/184}) [ 1946.856173][ T3954] EXT4-fs (loop2): get root inode failed [ 1946.890936][ T3954] EXT4-fs (loop2): mount failed 20:46:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) 20:46:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000380)='./file0\x00') (async) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000380)='./file0\x00') r2 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x54401, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000003c0)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, r5}) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r7}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r7}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r7}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r5, 0xb8, &(0x7f0000000080)=""/184}) 20:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000200), 0x62e, 0x600000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f00000002c0)={r9}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r10}) 20:46:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffff890]}, 0x8, 0x80800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000180)={0x8, 0x1bd0, 0xe560}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) 20:46:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0x5a, &(0x7f0000000040)=""/90}) 20:46:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffff890]}, 0x8, 0x80800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000180)={0x8, 0x1bd0, 0xe560}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) 20:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000200), 0x62e, 0x600000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f00000002c0)={r9}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7}) 20:46:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0x5a, &(0x7f0000000040)=""/90}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0x5a, &(0x7f0000000040)=""/90}) [ 1947.212786][ T3982] loop2: detected capacity change from 0 to 128 20:46:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r8, 0x0}) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.log\x00', 0x10080, 0x58) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r12 = pidfd_getfd(r10, r10, 0x0) r13 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendfile(r12, r13, &(0x7f0000000380)=0x7f, 0x3) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r14, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r15, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r14, 0xc06864ce, &(0x7f00000000c0)={r16, 0x0, 0x0, 0x0, 0x1, [0x0], [], [0x0, 0x0, 0xfffffffd], [0x0, 0x2, 0x9]}) ioctl$DRM_IOCTL_GEM_FLINK(r14, 0xc008640a, &(0x7f0000000040)={r17}) ioctl$DRM_IOCTL_MODE_ADDFB2(r11, 0xc06864b8, &(0x7f0000000300)={r9, 0x6, 0x0, 0x5, 0x1, [r17, r6, r5, r6], [0x7, 0x855, 0xb7, 0x1ff], [0x5, 0x5, 0xfffffff7, 0xfffffff8], [0x17a8, 0xbe, 0x7, 0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000280)={0x81, 0x5, 0x2bcc}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r18}) 20:46:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0x5a, &(0x7f0000000040)=""/90}) [ 1947.276294][ T3982] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1947.304173][ T3982] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000200), 0x62e, 0x600000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f00000002c0)={r8}) [ 1947.323992][ T3982] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1947.360780][ T3982] EXT4-fs (loop2): get root inode failed 20:46:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffff890]}, 0x8, 0x80800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000180)={0x8, 0x1bd0, 0xe560}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) [ 1947.381778][ T3982] EXT4-fs (loop2): mount failed 20:46:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={r1, 0xf0, &(0x7f0000000040)=""/240}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:46:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r8, 0x0}) (async) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.log\x00', 0x10080, 0x58) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) (async) r12 = pidfd_getfd(r10, r10, 0x0) r13 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendfile(r12, r13, &(0x7f0000000380)=0x7f, 0x3) (async) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r14, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r15, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r14, 0xc06864ce, &(0x7f00000000c0)={r16, 0x0, 0x0, 0x0, 0x1, [0x0], [], [0x0, 0x0, 0xfffffffd], [0x0, 0x2, 0x9]}) ioctl$DRM_IOCTL_GEM_FLINK(r14, 0xc008640a, &(0x7f0000000040)={r17}) ioctl$DRM_IOCTL_MODE_ADDFB2(r11, 0xc06864b8, &(0x7f0000000300)={r9, 0x6, 0x0, 0x5, 0x1, [r17, r6, r5, r6], [0x7, 0x855, 0xb7, 0x1ff], [0x5, 0x5, 0xfffffff7, 0xfffffff8], [0x17a8, 0xbe, 0x7, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000280)={0x81, 0x5, 0x2bcc}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r18}) 20:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000200), 0x62e, 0x600000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:45 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) syz_clone3(&(0x7f0000000500)={0x8a08100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200), {0xd}, &(0x7f0000000240)=""/175, 0xaf, &(0x7f0000000300)=""/54, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1], 0x4}, 0x58) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) 20:46:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={r1, 0xf0, &(0x7f0000000040)=""/240}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={r1, 0xf0, &(0x7f0000000040)=""/240}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) 20:46:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r8, 0x0}) (async) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.log\x00', 0x10080, 0x58) (async) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r12 = pidfd_getfd(r10, r10, 0x0) (async) r13 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendfile(r12, r13, &(0x7f0000000380)=0x7f, 0x3) (async) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r14, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r15, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r14, 0xc06864ce, &(0x7f00000000c0)={r16, 0x0, 0x0, 0x0, 0x1, [0x0], [], [0x0, 0x0, 0xfffffffd], [0x0, 0x2, 0x9]}) ioctl$DRM_IOCTL_GEM_FLINK(r14, 0xc008640a, &(0x7f0000000040)={r17}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r11, 0xc06864b8, &(0x7f0000000300)={r9, 0x6, 0x0, 0x5, 0x1, [r17, r6, r5, r6], [0x7, 0x855, 0xb7, 0x1ff], [0x5, 0x5, 0xfffffff7, 0xfffffff8], [0x17a8, 0xbe, 0x7, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000280)={0x81, 0x5, 0x2bcc}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r18}) 20:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:45 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) syz_clone3(&(0x7f0000000500)={0x8a08100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200), {0xd}, &(0x7f0000000240)=""/175, 0xaf, &(0x7f0000000300)=""/54, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1], 0x4}, 0x58) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) 20:46:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1947.676133][ T4015] loop2: detected capacity change from 0 to 128 [ 1947.703864][ T4015] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={r1, 0xf0, &(0x7f0000000040)=""/240}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1947.728961][ T4015] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) 20:46:45 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) syz_clone3(&(0x7f0000000500)={0x8a08100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200), {0xd}, &(0x7f0000000240)=""/175, 0xaf, &(0x7f0000000300)=""/54, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1], 0x4}, 0x58) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) (async) syz_clone3(&(0x7f0000000500)={0x8a08100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200), {0xd}, &(0x7f0000000240)=""/175, 0xaf, &(0x7f0000000300)=""/54, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1], 0x4}, 0x58) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) (async) [ 1947.772628][ T4015] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1947.840647][ T4015] EXT4-fs (loop2): get root inode failed [ 1947.848390][ T4015] EXT4-fs (loop2): mount failed 20:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x4c, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0x8, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) 20:46:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) (async) 20:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) 20:46:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x4c, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0x8, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x4c, 0x1, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0x8, 0x8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) 20:46:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) (async) 20:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) [ 1948.168873][ T4045] loop2: detected capacity change from 0 to 128 [ 1948.210952][ T4045] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x200}) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) openat$cgroup_ro(r10, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) 20:46:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x4c, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0x8, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) [ 1948.256394][ T4045] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1948.281043][ T4045] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1948.329631][ T4045] EXT4-fs (loop2): get root inode failed [ 1948.358234][ T4045] EXT4-fs (loop2): mount failed 20:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) 20:46:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async, rerun: 32) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x200}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, &(0x7f0000000280)=0x8) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) openat$cgroup_ro(r10, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) 20:46:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x200}) (async) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, &(0x7f0000000280)=0x8) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) (async, rerun: 32) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async, rerun: 64) openat$cgroup_ro(r10, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) [ 1948.621462][ T4077] loop2: detected capacity change from 0 to 128 [ 1948.658081][ T4077] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1948.686112][ T4077] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1948.725740][ T4077] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1948.772262][ T4077] EXT4-fs (loop2): get root inode failed [ 1948.792365][ T4077] EXT4-fs (loop2): mount failed 20:46:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000140)={&(0x7f00000004c0)=[0x0, 0x0, r3, 0x0, 0x0], 0x5, 0x0, 0x0, 0x4, 0x400, 0x1, 0x0, {0x401, 0x8000, 0x3, 0x3, 0x100, 0x800, 0x7fff, 0x2, 0x3, 0x0, 0x4000, 0x6, 0xb48, 0x762ef27b, "b4a74984461780007552b8db1505ef312f868e0d253d66daef38af572bbe8ec1"}}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000040)="967b5ac129280291b2a00cd6c6f6e88cd6dac2c4d06f0dfe2f0e4a3e948b7c9f7e6f08e12d3fd007b594d2dd4a237f03c3e24e24774bd7c15fedb31999e3379bf818ce4cf121b0a3695a507135a0291287a2d15d1de99885fd48211668dd8fea8d3a64a516c76c213041ac550a8fb5", 0x6f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000001c0)={0x7}) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r7, r7, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000380)={r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000580)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r2}) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r8, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r8, r8, &(0x7f0000000040)=0x3f00, 0x7fff) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000880)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r10}) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x2, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000400)={0x0, 0x0, 0x0}) 20:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) 20:46:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000140)={&(0x7f00000004c0)=[0x0, 0x0, r3, 0x0, 0x0], 0x5, 0x0, 0x0, 0x4, 0x400, 0x1, 0x0, {0x401, 0x8000, 0x3, 0x3, 0x100, 0x800, 0x7fff, 0x2, 0x3, 0x0, 0x4000, 0x6, 0xb48, 0x762ef27b, "b4a74984461780007552b8db1505ef312f868e0d253d66daef38af572bbe8ec1"}}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000040)="967b5ac129280291b2a00cd6c6f6e88cd6dac2c4d06f0dfe2f0e4a3e948b7c9f7e6f08e12d3fd007b594d2dd4a237f03c3e24e24774bd7c15fedb31999e3379bf818ce4cf121b0a3695a507135a0291287a2d15d1de99885fd48211668dd8fea8d3a64a516c76c213041ac550a8fb5", 0x6f}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000001c0)={0x7}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r7, r7, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000380)={r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000580)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r2}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r8, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r8, r8, &(0x7f0000000040)=0x3f00, 0x7fff) (async) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000880)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r10}) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x2, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000400)={0x0, 0x0, 0x0}) 20:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) [ 1949.044709][ T4095] loop2: detected capacity change from 0 to 128 [ 1949.082586][ T4095] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000140)={&(0x7f00000004c0)=[0x0, 0x0, r3, 0x0, 0x0], 0x5, 0x0, 0x0, 0x4, 0x400, 0x1, 0x0, {0x401, 0x8000, 0x3, 0x3, 0x100, 0x800, 0x7fff, 0x2, 0x3, 0x0, 0x4000, 0x6, 0xb48, 0x762ef27b, "b4a74984461780007552b8db1505ef312f868e0d253d66daef38af572bbe8ec1"}}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000040)="967b5ac129280291b2a00cd6c6f6e88cd6dac2c4d06f0dfe2f0e4a3e948b7c9f7e6f08e12d3fd007b594d2dd4a237f03c3e24e24774bd7c15fedb31999e3379bf818ce4cf121b0a3695a507135a0291287a2d15d1de99885fd48211668dd8fea8d3a64a516c76c213041ac550a8fb5", 0x6f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000001c0)={0x7}) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (rerun: 32) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r7, r7, &(0x7f0000000040)=0x3f00, 0x7fff) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000380)={r5}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000580)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r2}) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (rerun: 64) pwritev2(r8, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r8, r8, &(0x7f0000000040)=0x3f00, 0x7fff) (async) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000880)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r10}) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x2, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000400)={0x0, 0x0, 0x0}) [ 1949.120386][ T4095] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) [ 1949.166226][ T4095] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1949.191500][ T4095] EXT4-fs (loop2): get root inode failed [ 1949.215694][ T4095] EXT4-fs (loop2): mount failed 20:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) 20:46:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3U1oHGUYB/BnZneNSVaJehHEj4uILgS9iV7iRSEgIYgIKkREvSiJEBO8JYLgxUN7b8mpl1B6a9pjySW3lkJPaZtDeim0pdCGHtrDltnZLel2S9NudrfN/H4wzEdm5nmHmf87OezLBFBYYxExERGliKhFRCUikt07vJdPY83VleGNmYh6/ZubSWO/fD3XOm40IpYj4tOIWE+T+L0csbj2w/adza8++H+h8v6xte+H+3qRTTe2t77eOTr138nJTxbPXbg2lcREVB+6rv2XdNhWTiJe70Wx50RSHnQL2Ivpv09czHL/RvM5rUUl0shv3qH5l9Yr8dGRxx17+Pr5t/rZVmD/1euV7B24XAcKJ42IaiTpeETky2k6Pp7/D3+pNJL+MTf/V+23uYXZXwbdUwH7pRqx9eXpoVOjbfm/WsrzDxxcWf6/nV69nC3vlPZwwL+v9L5RQG+9nc+y/Nd+Wvow9pp/4MCQfygu+Yfikn8ormfJ/6+dfswGvHC8/6G45B+KS/6huOQfikv+obh25x8AKJb60KBHIAODMuj+BwAAAAAAAAAAAAAAAAAAeEQ5ImZWhjcaU7bh5Z6X/OzWgxHI5YhW7Vb9iFLje8StlozcThqNbEmaje7Gj+92eYIuHe/36Ou26331Sp/rtzn7zmDrL81GLP8TER+Xy+3PX9qcuvHaE/5e+bnLAk+p/fMdn3/X3/rt7q0Otv7kZsSZL7L736n/SePNxrxz/1PN7l+X9f+82+UJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Jv7AQAA//88b3Ft") 20:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x141001) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x10}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ftruncate(r2, 0xfffffffeffffffff) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, 0x5, 0x7}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000200)=0x401) 20:46:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000200)={r4}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {r7}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x44, r9, 0x0}) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000280)=""/157, &(0x7f0000000340)=0x9d) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r12}) 20:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) [ 1949.398725][ T4115] loop2: detected capacity change from 0 to 128 [ 1949.432312][ T4115] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x141001) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x10}) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ftruncate(r2, 0xfffffffeffffffff) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, 0x5, 0x7}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000200)=0x401) [ 1949.468837][ T4115] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) 20:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x141001) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x10}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ftruncate(r2, 0xfffffffeffffffff) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, 0x5, 0x7}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000200)=0x401) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x141001) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x10}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ftruncate(r2, 0xfffffffeffffffff) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, 0x5, 0x7}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000200)=0x401) (async) [ 1949.535902][ T4115] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000200)={r4}) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {r7}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x44, r9, 0x0}) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000280)=""/157, &(0x7f0000000340)=0x9d) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r12}) [ 1949.620324][ T4115] EXT4-fs (loop2): get root inode failed [ 1949.626393][ T4115] EXT4-fs (loop2): mount failed 20:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x901, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x4, 0x7, 0x9, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0x40086203, 0x0) 20:46:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x3, 0x7}) 20:46:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000200)={r4}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {r7}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x44, r9, 0x0}) (async) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000280)=""/157, &(0x7f0000000340)=0x9d) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r12}) 20:46:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x901, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x901, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x4, 0x7, 0x9, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x4, 0x7, 0x9, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0x40086203, 0x0) [ 1949.816409][ T4145] loop2: detected capacity change from 0 to 128 20:46:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x3, 0x7}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x3, 0x7}) (async) 20:46:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1949.868660][ T4145] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x901, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x4, 0x7, 0x9, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0x40086203, 0x0) [ 1949.918608][ T4145] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1949.957005][ T4145] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x3, 0x7}) 20:46:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x28, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x9e39, 0x2d}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) 20:46:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1950.097942][ T4145] EXT4-fs (loop2): get root inode failed [ 1950.104398][ T4145] EXT4-fs (loop2): mount failed 20:46:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r7}) 20:46:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:46:48 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x28, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x28, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x9e39, 0x2d}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) 20:46:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000440)={0x1, r2, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3, r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r7}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r8, 0x40106437, &(0x7f0000000140)={0x0, 0x1}) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x1, 0x4, 0x7}) 20:46:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r7}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080), 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r7}) (async) 20:46:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:46:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x28, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x9e39, 0x2d}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) [ 1950.368158][ T4184] loop2: detected capacity change from 0 to 128 20:46:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000440)={0x1, r2, 0x2}) (async) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3, r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r7}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r8, 0x40106437, &(0x7f0000000140)={0x0, 0x1}) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x1, 0x4, 0x7}) 20:46:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) [ 1950.462532][ T4184] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1950.490128][ T4184] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1950.546646][ T4184] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1950.615378][ T4184] EXT4-fs (loop2): get root inode failed [ 1950.664171][ T4184] EXT4-fs (loop2): mount failed 20:46:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r7}) 20:46:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000440)={0x1, r2, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3, r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r7}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r8, 0x40106437, &(0x7f0000000140)={0x0, 0x1}) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x1, 0x4, 0x7}) 20:46:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r2, 0x21) r3 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r3, 0x21) dup3(r2, r3, 0x80000) sendfile(r1, r1, &(0x7f0000000040)=0x3f00, 0x7fff) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x2, r5, 0x0, 0x400, 0x0, 0x1d57e42, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) 20:46:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x201, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x10600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x2, 0xa}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f00000003c0)={0xdeaa, r6, r7}) copy_file_range(r1, 0x0, r5, 0x0, 0x400, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1950.861797][ T4217] loop2: detected capacity change from 0 to 128 20:46:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x9765, 0x0, 0x3, [0x0], [0xfffffffc, 0x0, 0x34], [], [0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000380)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x0, 0x6}) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x690000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) fsetxattr$security_evm(r8, &(0x7f00000005c0), &(0x7f0000000600)=@v1={0x2, "ef2526f5e7998e2d86bbff3ba3831a"}, 0x10, 0x2) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r7, r9, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, 0x0], 0x2, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000640)={r6, 0x7f, 0x5000, 0x7, 0x2, [], [0xfffffffc, 0x3, 0x5, 0x80000000], [0x4, 0x7fffffff, 0x9, 0xfffffffe], [0x1, 0x51abdb1a, 0x0, 0x8]}) [ 1950.917899][ T4217] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1950.953777][ T4217] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:49 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1950.994614][ T4217] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1951.025143][ T4217] EXT4-fs (loop2): get root inode failed 20:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r2, 0x21) r3 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r3, 0x21) dup3(r2, r3, 0x80000) sendfile(r1, r1, &(0x7f0000000040)=0x3f00, 0x7fff) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x2, r5, 0x0, 0x400, 0x0, 0x1d57e42, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (async) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) (async) fchmod(r2, 0x21) (async) memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) (async) fchmod(r3, 0x21) (async) dup3(r2, r3, 0x80000) (async) sendfile(r1, r1, &(0x7f0000000040)=0x3f00, 0x7fff) (async) syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x2, r5, 0x0, 0x400, 0x0, 0x1d57e42, 0x1f}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) [ 1951.111052][ T4217] EXT4-fs (loop2): mount failed 20:46:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x201, 0x101, 0x101}) (async) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x10600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x2, 0xa}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f00000003c0)={0xdeaa, r6, r7}) (async) copy_file_range(r1, 0x0, r5, 0x0, 0x400, 0x0) (async, rerun: 32) syz_open_dev$dri(0x0, 0x60f, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x9765, 0x0, 0x3, [0x0], [0xfffffffc, 0x0, 0x34], [], [0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000380)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x0, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000380)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x0, 0x6}) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x690000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) (async) r8 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) fsetxattr$security_evm(r8, &(0x7f00000005c0), &(0x7f0000000600)=@v1={0x2, "ef2526f5e7998e2d86bbff3ba3831a"}, 0x10, 0x2) (async) fsetxattr$security_evm(r8, &(0x7f00000005c0), &(0x7f0000000600)=@v1={0x2, "ef2526f5e7998e2d86bbff3ba3831a"}, 0x10, 0x2) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r7, r9, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r10}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, 0x0], 0x2, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000640)={r6, 0x7f, 0x5000, 0x7, 0x2, [], [0xfffffffc, 0x3, 0x5, 0x80000000], [0x4, 0x7fffffff, 0x9, 0xfffffffe], [0x1, 0x51abdb1a, 0x0, 0x8]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000640)={r6, 0x7f, 0x5000, 0x7, 0x2, [], [0xfffffffc, 0x3, 0x5, 0x80000000], [0x4, 0x7fffffff, 0x9, 0xfffffffe], [0x1, 0x51abdb1a, 0x0, 0x8]}) 20:46:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:49 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x201, 0x101, 0x101}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x10600) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x2, 0xa}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f00000003c0)={0xdeaa, r6, r7}) (async) copy_file_range(r1, 0x0, r5, 0x0, 0x400, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r2, 0x21) r3 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r3, 0x21) dup3(r2, r3, 0x80000) sendfile(r1, r1, &(0x7f0000000040)=0x3f00, 0x7fff) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x2, r5, 0x0, 0x400, 0x0, 0x1d57e42, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (async) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) (async) fchmod(r2, 0x21) (async) memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) (async) fchmod(r3, 0x21) (async) dup3(r2, r3, 0x80000) (async) sendfile(r1, r1, &(0x7f0000000040)=0x3f00, 0x7fff) (async) syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x2, r5, 0x0, 0x400, 0x0, 0x1d57e42, 0x1f}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) 20:46:49 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1951.414949][ T4248] loop2: detected capacity change from 0 to 128 20:46:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x9765, 0x0, 0x3, [0x0], [0xfffffffc, 0x0, 0x34], [], [0xfffffffffffffffd]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000380)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x0, 0x6}) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x690000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r8 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) fsetxattr$security_evm(r8, &(0x7f00000005c0), &(0x7f0000000600)=@v1={0x2, "ef2526f5e7998e2d86bbff3ba3831a"}, 0x10, 0x2) (async) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x80) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r7, r9, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, 0x0], 0x2, r2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000640)={r6, 0x7f, 0x5000, 0x7, 0x2, [], [0xfffffffc, 0x3, 0x5, 0x80000000], [0x4, 0x7fffffff, 0x9, 0xfffffffe], [0x1, 0x51abdb1a, 0x0, 0x8]}) [ 1951.458048][ T4248] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x1cd) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000002c0)={r8}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r14, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r13, 0xc06864ce, &(0x7f00000000c0)={r15, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r13, 0xc008640a, &(0x7f0000000040)={r16}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={r16}) 20:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x8000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1951.541560][ T4248] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1951.617686][ T4248] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x1cd) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000002c0)={r8}) (async) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) (async, rerun: 32) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r14, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r13, 0xc06864ce, &(0x7f00000000c0)={r15, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r13, 0xc008640a, &(0x7f0000000040)={r16}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={r16}) 20:46:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x8000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1951.709696][ T4248] EXT4-fs (loop2): get root inode failed [ 1951.715369][ T4248] EXT4-fs (loop2): mount failed 20:46:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000002c0)={r6, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r10}) 20:46:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x8000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:46:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x1cd) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000002c0)={r8}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) (async, rerun: 64) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r14, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r13, 0xc06864ce, &(0x7f00000000c0)={r15, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r13, 0xc008640a, &(0x7f0000000040)={r16}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280)={r16}) [ 1951.952660][ T4290] loop2: detected capacity change from 0 to 128 20:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x3) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000002c0)={r6, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r10}) [ 1952.000372][ T4290] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1952.041953][ T4290] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000300)={r3, 0x0, 0x7, 0x1, &(0x7f00000002c0)=[{0x100, 0x2, 0x8}]}) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x9, 0x6, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1952.112825][ T4290] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000002c0)={r6, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000002c0)={r6, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r10}) 20:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x42) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040), 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r4, 0x0, 0x0}) [ 1952.204044][ T4290] EXT4-fs (loop2): get root inode failed 20:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1952.247267][ T4290] EXT4-fs (loop2): mount failed 20:46:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3T2II2UcBvBnJonn3kU5tRHEj0ZEA4t2os3ZKBzIcYgIKpyI2ih3wnmH3a4g2Fhor2xls4idq6Vss50iWK26xdoIKoIuFlpEJpPImo24mk2iO78fDPORmfm/w8zzTopMJkBjnU5yJkkrSS9JJ0mxf4U76uH0cHZtaetC0u8/9mMxWK+er422O5VkNcn9STbLIi+2k6sbT+3+sv3IXW9e6dz53saTS3M9yKEfdnce3Xv33Bsfnr3v6mdffHeuyJl0/3RcR6+YsKxdJDfOoth/RNFedAs4jPOvfvBllfubhtdpL52UqU/eW5ev2ezknnf+atu3v//8lnm2FTh6/X6nugeu9oHGKZN0U5TLSerpslxerr/Df9U6Wb506fIrvRcuXbn43KJ7KuCodJOdhz8+8dGpsfx/26rzDxxfVf4fP7/+dTW91zrEBq9fN/tGAbN1az2q8t97ZuXuHDb/wLEh/9Bc8g/NJf/QXP8m/89P+jEb8L/j/g/NJf/QXPIPzSX/0FzyD821P/8AQLP0Tyz6CWRgURbd/wAAAAAAAAAAAAAAAAAAAAe0k1xYW9oaDNWCa2de8oGf/ngCuZ2Mao/qJ63B+4hHLTn5czFo5EgxbPQ0nr59yh1M6f15P309drzXfzPn+mM+vW2x9VcuJquvJbm33T54/RWZ9m/xbvibzzvPTlngHxp/fceDT8y3/rjf1hdb/+x28slD1fmf1P+UuXkwntz/dKvzN2X9l3+dcgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMze8BAAD//zxpcW0=") 20:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000300)={r3, 0x0, 0x7, 0x1, &(0x7f00000002c0)=[{0x100, 0x2, 0x8}]}) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x9, 0x6, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000300)={r3, 0x0, 0x7, 0x1, &(0x7f00000002c0)=[{0x100, 0x2, 0x8}]}) (async) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x9, 0x6, 0x5, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) (async) 20:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x42) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040), 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r4, 0x0, 0x0}) 20:46:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x189000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000280)={0x0, 0x40}) 20:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x42) (async) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040), 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r4, 0x0, 0x0}) 20:46:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x189000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000280)={0x0, 0x40}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x189000) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000280)={0x0, 0x40}) (async) 20:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) (rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000300)={r3, 0x0, 0x7, 0x1, &(0x7f00000002c0)=[{0x100, 0x2, 0x8}]}) (async) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x9, 0x6, 0x5, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:46:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6f, 0x88042) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={r2, 0x4, 0x1, 0x8, 0x0, [], [0x80, 0x80000000, 0x439, 0xff], [0x400, 0x4e8d, 0x5, 0x349f], [0x8, 0x9, 0x3, 0x1000]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r3, 0x0, 0x0}) [ 1952.560270][ T4325] loop2: detected capacity change from 0 to 128 20:46:50 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x189000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000280)={0x0, 0x40}) 20:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1952.613559][ T4325] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1952.690097][ T4325] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1952.755548][ T4325] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1952.792578][ T4325] EXT4-fs (loop2): get root inode failed [ 1952.805736][ T4325] EXT4-fs (loop2): mount failed 20:46:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3U1oHGUYB/BnZneNSVaJehHEj4uILgS9iV7iRSEgIYgIKkREvSiJEBO8JYLgxYPeW3LqJZTemvZYcsmtpdBT2uaQXgptKbShh/awZXZ2S7rZ0rSb3W0zvx8M85GZed5h5v9ODvsyARTWWERMREQpImoRUYmIZPcO7+TTWHN1ZXhjJqJe/+pm0tgvX8+1jhuNiOWI+Dgi1tMkfi1HLK59t31n84v3/l2ovHts7dvhvl5k043trS93jk79c3Lyo8VzF65NJTER1Yeu6+AlHbaVk4hXe1HsGZGUB90C9mP6zxMXs9y/1nxOa1GJNPKb99/8C+uV+ODIo479//r5N/rZVuDg1euV7B24XAcKJ42IaiTpeETky2k6Pp7/D3+pNJL+Njf/R+2XuYXZnwbdUwEHpRqx9fnpoVOjbfm/WsrzDxxeWf6/nl69nC3vlPZxwN8v9b5RQG+9mc+y/Nd+WHo/9pt/4NCQfygu+Yfikn8orqfJ/8+dfswGPHe8/6G45B+KS/6huOQfikv+obh25x8AKJb60KBHIAODMuj+BwAAAAAAAAAAAAAAAAAA2KMcETMrwxuNKdvwYs9LfnLrwQjkckSrdqt+RKnxPeJWS0ZuJ41GtiTNRnfj+7e7PEGXjvd79HXb9b58pc/125x9a7D1l2Yjlv+KiA/L5b3PX9L18/XKY/5e+bHLAk+o/fMdn37T3/rt7q0Otv7kZsSZz7L736n/SeP1xrxz/1PN7l+X9X+/2+UJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Jv7AQAA//+tTXFu") 20:46:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6f, 0x88042) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={r2, 0x4, 0x1, 0x8, 0x0, [], [0x80, 0x80000000, 0x439, 0xff], [0x400, 0x4e8d, 0x5, 0x349f], [0x8, 0x9, 0x3, 0x1000]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r3, 0x0, 0x0}) 20:46:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="2ee4ff695c489a009e669d23e3e6b19e9875a0008facbcab04d7cd0e6c62c4c32cca31ebba6e271047376fa3d6abe60da71ba0ba6a1716b0"]) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000002c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x1, r9, r3, 0x100, 0x1ff, 0x5, 0x3, {0x4c41879, 0x7ff, 0x10e, 0xc39, 0x88f8, 0x0, 0x3, 0x708, 0x7, 0x0, 0xfff, 0xe84, 0x0, 0x5, "040f68015b6e97815d821d6c3335ed15e00296a7806b970a47517806833354a7"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) 20:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffffae, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000040)=0x3f00, 0x7fff) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x4, 0x3, [], [0x5, 0x6b8a, 0x9c29, 0x8001], [0x9e, 0xf0, 0x8fce, 0x40], [0x5, 0x8000000000000000, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) 20:46:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000000c0)={r4, 0x0, 0xffffffff, 0x0, 0x0, [0x0], [], [], [0x2]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000040)={r9}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f00000000c0)={r12, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0xfffffffe, 0x4], [0x6]}) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000040)={r13}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000300)={0x0, 0x6, 0xffff, 0x83a5, 0x1, [r5, 0x0, r9, r13], [0x1, 0x9, 0x3, 0x9], [0x9, 0x7fffffff, 0x6, 0xf1b], [0x7, 0x100, 0xfff, 0x10000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r14 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r14, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r15 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r15, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r14, 0xc00464b4, &(0x7f0000000100)={r16}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6f, 0x88042) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={r2, 0x4, 0x1, 0x8, 0x0, [], [0x80, 0x80000000, 0x439, 0xff], [0x400, 0x4e8d, 0x5, 0x349f], [0x8, 0x9, 0x3, 0x1000]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r3, 0x0, 0x0}) 20:46:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="2ee4ff695c489a009e669d23e3e6b19e9875a0008facbcab04d7cd0e6c62c4c32cca31ebba6e271047376fa3d6abe60da71ba0ba6a1716b0"]) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="2ee4ff695c489a009e669d23e3e6b19e9875a0008facbcab04d7cd0e6c62c4c32cca31ebba6e271047376fa3d6abe60da71ba0ba6a1716b0"]) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000002c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x1, r9, r3, 0x100, 0x1ff, 0x5, 0x3, {0x4c41879, 0x7ff, 0x10e, 0xc39, 0x88f8, 0x0, 0x3, 0x708, 0x7, 0x0, 0xfff, 0xe84, 0x0, 0x5, "040f68015b6e97815d821d6c3335ed15e00296a7806b970a47517806833354a7"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) 20:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1952.988021][ T4360] loop2: detected capacity change from 0 to 128 [ 1953.008909][ T4360] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffffae, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r5, r5, &(0x7f0000000040)=0x3f00, 0x7fff) (async) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x4, 0x3, [], [0x5, 0x6b8a, 0x9c29, 0x8001], [0x9e, 0xf0, 0x8fce, 0x40], [0x5, 0x8000000000000000, 0xffffffffffffffff]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) 20:46:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000000c0)={r4, 0x0, 0xffffffff, 0x0, 0x0, [0x0], [], [], [0x2]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r5}) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000040)={r9}) (async) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f00000000c0)={r12, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0xfffffffe, 0x4], [0x6]}) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000040)={r13}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000300)={0x0, 0x6, 0xffff, 0x83a5, 0x1, [r5, 0x0, r9, r13], [0x1, 0x9, 0x3, 0x9], [0x9, 0x7fffffff, 0x6, 0xf1b], [0x7, 0x100, 0xfff, 0x10000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r14 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r14, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r15 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r15, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r14, 0xc00464b4, &(0x7f0000000100)={r16}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) (rerun: 64) [ 1953.042888][ T4360] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "88414f4ccaa74332c57db1f88abe094c372544c7311971d5d3686b538fe66e6628566d179abc6e0e83c1c856a46bd9054d636052d9e559b5887488a9036390999c95db84b5785f7b76049d06959af4de3dd8c114c89086f6853b8abdc0f75b465f92c7ae528674bf50f241879fa72224ab71aaae8b332394f5e3ee30af35bd9e61f812d58a7000dde1a25f06c08ebdb05bbdfceefccf70129075cd7b929d88ef7645c100de9814b877fd4dff0dce958c55f8fcf91c5be7981243586b242b10014faeadfa9eb0174192ea9713007cc046a5412297137db9a9e84971a6b7ef9519fbf30fb8e310399909f01583b86eea904dcc669db4c188ba8de7d642f21244a6", "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"}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="2ee4ff695c489a009e669d23e3e6b19e9875a0008facbcab04d7cd0e6c62c4c32cca31ebba6e271047376fa3d6abe60da71ba0ba6a1716b0"]) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000002c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x1, r9, r3, 0x100, 0x1ff, 0x5, 0x3, {0x4c41879, 0x7ff, 0x10e, 0xc39, 0x88f8, 0x0, 0x3, 0x708, 0x7, 0x0, 0xfff, 0xe84, 0x0, 0x5, "040f68015b6e97815d821d6c3335ed15e00296a7806b970a47517806833354a7"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) [ 1953.112924][ T4360] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1953.148071][ T4360] EXT4-fs (loop2): get root inode failed [ 1953.177575][ T4360] EXT4-fs (loop2): mount failed 20:46:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3T1oJGUcBvBnZneNuVvl1EYQPxoRXQjaiTZno3AgxyEiqHAiaqPcCecddhdBsLHQXkllE8TOaClp0imCVdQUsRFUBA0WWqzMzq7EzYrRze5q5veDYT4yM/93mHneSbEvE6CxTiU5naSVpJekk6TYv8Md9XRquLq2vHU+6fcf+7EY7Fev10bHnUyymuT+JJtlkRfbyZWNp3Z/2X7krjcvd+58b+PJ5ble5NAPuzuP7r179o0Pz9x35bMvvjtb5HS6f7quo1dM2NYukhtnUew/omgvugUcxrlXP/iyyv1Nw+e0l07K1DfvrUvXbHZyzzt/dezb339+yzzbChy9fr9TvQNX+0DjlEm6KcqVJPVyWa6s1P/Df9U6Ub508dIrvRcuXr7w3KJ7KuCodJOdhz9e+ujkWP6/bdX5B46vKv+Pn1v/ulreax3igNevm32jgNm6tZ5V+e89c/XuHDb/wLEh/9Bc8g/NJf/QXP8m/89P+jEb8L/j/Q/NJf/QXPIPzSX/0FzyD821P/8AQLP0lxY9AhlYlEX3PwAAAAAAAAAAAAAAAAAAwAHtJOfXlrcGU7Xh2pmXfOCnP0Ygt5NR7VH9pDX4HvGoJSd+LgaNHCmGjZ7G07dPeYIpvT/v0ddj13v9N3OuP+bT2xZb/+qFZPW1JPe22wefvyJLU57/hr/5e+fZKQv8Q+Of73jwifnWH/fb+mLrn9lOPnmouv+T+p8yNw/mk/ufbnX/pqz/8q9TngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC5+T0AAP//ABdxcQ==") 20:46:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000000c0)={r4, 0x0, 0xffffffff, 0x0, 0x0, [0x0], [], [], [0x2]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r5}) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000040)={r9}) (async, rerun: 32) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f00000000c0)={r12, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0xfffffffe, 0x4], [0x6]}) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000040)={r13}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000300)={0x0, 0x6, 0xffff, 0x83a5, 0x1, [r5, 0x0, r9, r13], [0x1, 0x9, 0x3, 0x9], [0x9, 0x7fffffff, 0x6, 0xf1b], [0x7, 0x100, 0xfff, 0x10000]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r14 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r14, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r15 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r15, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r14, 0xc00464b4, &(0x7f0000000100)={r16}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffffae, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffffae, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000040)=0x3f00, 0x7fff) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x4, 0x3, [], [0x5, 0x6b8a, 0x9c29, 0x8001], [0x9e, 0xf0, 0x8fce, 0x40], [0x5, 0x8000000000000000, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) [ 1953.382516][ T4387] loop2: detected capacity change from 0 to 128 20:46:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x113100, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) 20:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1953.444226][ T4387] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1953.458735][ T4387] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1953.473075][ T4387] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1953.501478][ T4387] EXT4-fs (loop2): get root inode failed [ 1953.509051][ T4387] EXT4-fs (loop2): mount failed 20:46:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x113100, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) 20:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x113100, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x113100, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) 20:46:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000000000000008001c006c0900000800270028ddd574"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10c4}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x198, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd0c435eb}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xecc}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x38}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000800}, 0x40840) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r10 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r8, 0xc0406429, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000580)=[0x3ff, 0x5], &(0x7f00000005c0)=[0x101, 0x3f, 0x9, 0x8, 0x40, 0x7], 0x61, 0x1, 0x6, &(0x7f0000000600)=[0xffffff01], &(0x7f0000000640)=[0x8, 0xfffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r11 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f0000000100)={r12}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000980)) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r11, 0xc0186419, &(0x7f0000000540)={0x2, &(0x7f0000000300)=""/18, &(0x7f0000000340)=[{0x3, 0x44, 0x5, &(0x7f00000003c0)=""/68}, {0x4adeb0ce, 0x61, 0x800, &(0x7f00000004c0)=""/97}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1953.712950][ T4408] loop2: detected capacity change from 0 to 128 20:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1953.772024][ T4408] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) [ 1953.825879][ T4408] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1953.850395][ T4408] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1953.882185][ T4416] netlink: 'syz-executor.0': attribute type 28 has an invalid length. [ 1953.897651][ T4408] EXT4-fs (loop2): get root inode failed [ 1953.926454][ T4408] EXT4-fs (loop2): mount failed 20:46:52 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:46:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000000000000008001c006c0900000800270028ddd574"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000000000000008001c006c0900000800270028ddd574"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10c4}]}, 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10c4}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x198, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd0c435eb}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xecc}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x38}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000800}, 0x40840) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) r10 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r8, 0xc0406429, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000580)=[0x3ff, 0x5], &(0x7f00000005c0)=[0x101, 0x3f, 0x9, 0x8, 0x40, 0x7], 0x61, 0x1, 0x6, &(0x7f0000000600)=[0xffffff01], &(0x7f0000000640)=[0x8, 0xfffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r11 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f0000000100)={r12}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000980)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000980)) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r11, 0xc0186419, &(0x7f0000000540)={0x2, &(0x7f0000000300)=""/18, &(0x7f0000000340)=[{0x3, 0x44, 0x5, &(0x7f00000003c0)=""/68}, {0x4adeb0ce, 0x61, 0x800, &(0x7f00000004c0)=""/97}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") [ 1954.096925][ T4425] netlink: 'syz-executor.0': attribute type 28 has an invalid length. [ 1954.098060][ T4428] netlink: 'syz-executor.0': attribute type 28 has an invalid length. [ 1954.126547][ T4429] loop2: detected capacity change from 0 to 128 20:46:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:46:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1954.192751][ T4429] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1954.225699][ T4429] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000000000000008001c006c0900000800270028ddd574"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000000000000008001c006c0900000800270028ddd574"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10c4}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x198, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd0c435eb}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xecc}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x38}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000800}, 0x40840) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) r10 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r8, 0xc0406429, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000580)=[0x3ff, 0x5], &(0x7f00000005c0)=[0x101, 0x3f, 0x9, 0x8, 0x40, 0x7], 0x61, 0x1, 0x6, &(0x7f0000000600)=[0xffffff01], &(0x7f0000000640)=[0x8, 0xfffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r11 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f0000000100)={r12}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000980)) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r11, 0xc0186419, &(0x7f0000000540)={0x2, &(0x7f0000000300)=""/18, &(0x7f0000000340)=[{0x3, 0x44, 0x5, &(0x7f00000003c0)=""/68}, {0x4adeb0ce, 0x61, 0x800, &(0x7f00000004c0)=""/97}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1954.267932][ T4429] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:52 executing program 4: keyctl$get_security(0x11, 0x0, &(0x7f0000000140)=""/20, 0x14) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x80040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:46:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x1, 0x4, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x3, 0x1, 0x4, 0x3}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000040)={r15}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000005c0)={r11, 0x4, 0x4, 0x9, 0x0, [r9, r10, r9, r15], [0x1, 0xe89, 0x1, 0x101], [0x8000, 0x9, 0xb3, 0x6], [0x0, 0x3, 0x10000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) [ 1954.367511][ T4429] EXT4-fs (loop2): get root inode failed [ 1954.373227][ T4429] EXT4-fs (loop2): mount failed [ 1954.376846][ T4440] netlink: 'syz-executor.0': attribute type 28 has an invalid length. [ 1954.378263][ T4441] netlink: 'syz-executor.0': attribute type 28 has an invalid length. 20:46:52 executing program 4: keyctl$get_security(0x11, 0x0, &(0x7f0000000140)=""/20, 0x14) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x80040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:46:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x1, 0x4, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5}) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x3, 0x1, 0x4, 0x3}) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000040)={r15}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000005c0)={r11, 0x4, 0x4, 0x9, 0x0, [r9, r10, r9, r15], [0x1, 0xe89, 0x1, 0x101], [0x8000, 0x9, 0xb3, 0x6], [0x0, 0x3, 0x10000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) 20:46:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:52 executing program 4: keyctl$get_security(0x11, 0x0, &(0x7f0000000140)=""/20, 0x14) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x80040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:46:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x1, 0x4, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5}) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x3, 0x1, 0x4, 0x3}) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000040)={r15}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000005c0)={r11, 0x4, 0x4, 0x9, 0x0, [r9, r10, r9, r15], [0x1, 0xe89, 0x1, 0x101], [0x8000, 0x9, 0xb3, 0x6], [0x0, 0x3, 0x10000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) 20:46:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) [ 1954.684329][ T4463] loop2: detected capacity change from 0 to 128 20:46:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0xaf, 0xfffffffc]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) [ 1954.747771][ T4463] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1954.803070][ T4463] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:53 executing program 5: write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x1200, 0x3ff, @remote}, {0xa, 0x4e23, 0x5, @private1, 0x8000}, 0xffffffffffffffff, 0x6c0}}, 0x48) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={r3, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r4, 0x0, 0x0}) 20:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) [ 1954.884234][ T4463] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0xaf, 0xfffffffc]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) 20:46:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0xaf, 0xfffffffc]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) [ 1954.933782][ T4463] EXT4-fs (loop2): get root inode failed [ 1954.971535][ T4463] EXT4-fs (loop2): mount failed 20:46:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x14000, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000004c0)={0x0, 0x5, 0x9, 0x10001, 0x1, [], [0x20, 0x4, 0x20c9, 0x4], [0xfffffe01, 0xfff, 0x45a, 0x6], [0x2, 0x1, 0x5, 0x2]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r10}) 20:46:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:53 executing program 5: write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x1200, 0x3ff, @remote}, {0xa, 0x4e23, 0x5, @private1, 0x8000}, 0xffffffffffffffff, 0x6c0}}, 0x48) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={r3, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r4, 0x0, 0x0}) 20:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x14000, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x14000, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000004c0)={0x0, 0x5, 0x9, 0x10001, 0x1, [], [0x20, 0x4, 0x20c9, 0x4], [0xfffffe01, 0xfff, 0x45a, 0x6], [0x2, 0x1, 0x5, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000004c0)={0x0, 0x5, 0x9, 0x10001, 0x1, [], [0x20, 0x4, 0x20c9, 0x4], [0xfffffe01, 0xfff, 0x45a, 0x6], [0x2, 0x1, 0x5, 0x2]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r10}) 20:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1955.181520][ T4498] loop2: detected capacity change from 0 to 128 [ 1955.201811][ T4498] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000240)={0x0, 0x1, 0xfffffbff, 0x4, 0x2, [], [0x374dd6be, 0x0, 0x80000001, 0x1], [0x40, 0x1, 0x5, 0x7ff], [0x1, 0x401, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) 20:46:53 executing program 5: write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x1200, 0x3ff, @remote}, {0xa, 0x4e23, 0x5, @private1, 0x8000}, 0xffffffffffffffff, 0x6c0}}, 0x48) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={r3, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r4, 0x0, 0x0}) [ 1955.255688][ T4498] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x14000, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000004c0)={0x0, 0x5, 0x9, 0x10001, 0x1, [], [0x20, 0x4, 0x20c9, 0x4], [0xfffffe01, 0xfff, 0x45a, 0x6], [0x2, 0x1, 0x5, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r8}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r8, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r10}) [ 1955.335881][ T4498] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000240)={0x0, 0x1, 0xfffffbff, 0x4, 0x2, [], [0x374dd6be, 0x0, 0x80000001, 0x1], [0x40, 0x1, 0x5, 0x7ff], [0x1, 0x401, 0x0, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) 20:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000001, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002e2f66696c653000a4c27643da7c5d4ec85751206e32464c95b4738f0a38253b40c3d70d4ad35ea9d9f89861e80e6ba0ffdf98865fc123ee979c21d0a7f9492a532f53c9bffbfdfc1aad937ff785b928a098959ed0d83a692efef7575f05f88d20"]) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f00000002c0)={0x8, 0x3e74, 0x80, 0xcf, &(0x7f0000000100)=""/207, 0xb9, &(0x7f0000000200)=""/185, 0x86, &(0x7f0000000440)=""/134}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) [ 1955.384342][ T4498] EXT4-fs (loop2): get root inode failed [ 1955.397454][ T4498] EXT4-fs (loop2): mount failed 20:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3T1oJGUcBvBnZnc9c7fK+VEI4kcjogtBO9HmbBQO5DhEBBVORG2UO+G8w+4iCDYW2iupbILYGS0lTTpFsIqaIjaCiqDBQouV2dmVuFkxutldL/P7wTAfmZn/O8w876TYlwnQWCeTnErSStJL0klS7N3hzno6OVxdXdo8l/T7j/9UDPar12uj404kWUnyQJKNsshL7eTy+tM7v249evdblzp3vb/+1NJcL3Lox53tx3bfO/PmR6fvv/z5l9+fKXIq3b9c1+ErJmxrF8mNsyj2P1G0F90CDuLsax9+VeX+puFz2ksnZeqb9/bFazY6uffdvzv2nR++uHWebQUOX7/fqd6BK32gccok3RTlcpJ6uSyXl+v/4b9uHS9fvnDx1d6LFy6df37RPRVwWLrJ9iOfHPv4xFj+v2vV+QeOrir/T5xd+6Za3m0d4IA3rpt9o4DZuq2eVfnvPXvlnhw0/8CRIf/QXPIPzSX/0Fz/Jf8vTPoxG3DV8f6H5pJ/aC75h+aSf2gu+Yfm2pt/AKBZ+scWPQIZWJRF9z8AAAAAAAAAAAAAAAAAAMA+7STnVpc2B1O14dqZl3zw5z9HILeTUe1R/aQ1+B7xqCXHfykGjRwpho2exjN3THmCKX0w79HXY9d7/bdzrj/ms9sXW//K+WTl9ST3tdv7n78iN095/hv+4e+d56Ys8C+Nf77joSfnW3/c72uLrX96K/n04er+T+p/ytwymE/uf7rV/Zuy/iu/TXkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5uaPAAAA//+79nF+") 20:46:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x4, 0x48}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000000c0)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0xfffffffd]}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000040)={r8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000240)={r1, 0x6, 0x9, 0xfffffffa, 0x1, [r4, 0x0, 0x0, r8], [0x7, 0x1, 0x9, 0xffffff80], [0x4, 0x7ff, 0x1, 0x10000], [0x9, 0xb73, 0x4, 0x1e4e0000000]}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r9}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000001d00)='mountstats\x00') syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000700)='./file0\x00', 0x200000, &(0x7f0000000780)=ANY=[@ANYBLOB='Qd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,max_read=0xfffffffffffffffa,max_read=0x00000000000037a3,pcr=00000000000000000000,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',nodevmap,cache=none,uname={-:(,smackfsroot=)[\',uid<', @ANYRESDEC=0xee00, @ANYBLOB=',defcontext=root,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c6f626a5f747970653d6d6f756e74ffff617473002c66736e616d653d002c00"]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r11 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r12 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) 20:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (rerun: 32) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000240)={0x0, 0x1, 0xfffffbff, 0x4, 0x2, [], [0x374dd6be, 0x0, 0x80000001, 0x1], [0x40, 0x1, 0x5, 0x7ff], [0x1, 0x401, 0x0, 0x1]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) 20:46:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000001, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002e2f66696c653000a4c27643da7c5d4ec85751206e32464c95b4738f0a38253b40c3d70d4ad35ea9d9f89861e80e6ba0ffdf98865fc123ee979c21d0a7f9492a532f53c9bffbfdfc1aad937ff785b928a098959ed0d83a692efef7575f05f88d20"]) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f00000002c0)={0x8, 0x3e74, 0x80, 0xcf, &(0x7f0000000100)=""/207, 0xb9, &(0x7f0000000200)=""/185, 0x86, &(0x7f0000000440)=""/134}) (async) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) [ 1955.576159][ T4535] fuse: Unknown parameter 'Qd' 20:46:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x4, 0x48}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000000c0)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0xfffffffd]}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000040)={r8}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000040)={r8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000240)={r1, 0x6, 0x9, 0xfffffffa, 0x1, [r4, 0x0, 0x0, r8], [0x7, 0x1, 0x9, 0xffffff80], [0x4, 0x7ff, 0x1, 0x10000], [0x9, 0xb73, 0x4, 0x1e4e0000000]}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r9}, 0x10) syz_open_procfs(0x0, &(0x7f0000001d00)='mountstats\x00') (async) r10 = syz_open_procfs(0x0, &(0x7f0000001d00)='mountstats\x00') syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000700)='./file0\x00', 0x200000, &(0x7f0000000780)=ANY=[@ANYBLOB='Qd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,max_read=0xfffffffffffffffa,max_read=0x00000000000037a3,pcr=00000000000000000000,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',nodevmap,cache=none,uname={-:(,smackfsroot=)[\',uid<', @ANYRESDEC=0xee00, @ANYBLOB=',defcontext=root,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c6f626a5f747970653d6d6f756e74ffff617473002c66736e616d653d002c00"]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r11 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r12 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) 20:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1955.637848][ T4540] loop2: detected capacity change from 0 to 128 [ 1955.678911][ T4540] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1955.699915][ T4540] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1955.735118][ T4540] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1955.743666][ T4547] fuse: Unknown parameter 'Qd' 20:46:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000001, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002e2f66696c653000a4c27643da7c5d4ec85751206e32464c95b4738f0a38253b40c3d70d4ad35ea9d9f89861e80e6ba0ffdf98865fc123ee979c21d0a7f9492a532f53c9bffbfdfc1aad937ff785b928a098959ed0d83a692efef7575f05f88d20"]) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002e2f66696c653000a4c27643da7c5d4ec85751206e32464c95b4738f0a38253b40c3d70d4ad35ea9d9f89861e80e6ba0ffdf98865fc123ee979c21d0a7f9492a532f53c9bffbfdfc1aad937ff785b928a098959ed0d83a692efef7575f05f88d20"]) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f00000002c0)={0x8, 0x3e74, 0x80, 0xcf, &(0x7f0000000100)=""/207, 0xb9, &(0x7f0000000200)=""/185, 0x86, &(0x7f0000000440)=""/134}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 20:46:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x20201) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r1) socket(0x2, 0x2, 0x1) io_setup(0x6, &(0x7f0000000280)=0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x2a}]) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0x40086203, 0x0) [ 1955.787950][ T4540] EXT4-fs (loop2): get root inode failed 20:46:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) [ 1955.846893][ T4540] EXT4-fs (loop2): mount failed 20:46:54 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x4, 0x48}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000000c0)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0xfffffffd]}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000040)={r8}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000040)={r8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000240)={r1, 0x6, 0x9, 0xfffffffa, 0x1, [r4, 0x0, 0x0, r8], [0x7, 0x1, 0x9, 0xffffff80], [0x4, 0x7ff, 0x1, 0x10000], [0x9, 0xb73, 0x4, 0x1e4e0000000]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000240)={r1, 0x6, 0x9, 0xfffffffa, 0x1, [r4, 0x0, 0x0, r8], [0x7, 0x1, 0x9, 0xffffff80], [0x4, 0x7ff, 0x1, 0x10000], [0x9, 0xb73, 0x4, 0x1e4e0000000]}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r9}, 0x10) syz_open_procfs(0x0, &(0x7f0000001d00)='mountstats\x00') (async) r10 = syz_open_procfs(0x0, &(0x7f0000001d00)='mountstats\x00') syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000700)='./file0\x00', 0x200000, &(0x7f0000000780)=ANY=[@ANYBLOB='Qd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,max_read=0xfffffffffffffffa,max_read=0x00000000000037a3,pcr=00000000000000000000,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000700)='./file0\x00', 0x200000, &(0x7f0000000780)=ANY=[@ANYBLOB='Qd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,max_read=0xfffffffffffffffa,max_read=0x00000000000037a3,pcr=00000000000000000000,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',nodevmap,cache=none,uname={-:(,smackfsroot=)[\',uid<', @ANYRESDEC=0xee00, @ANYBLOB=',defcontext=root,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c6f626a5f747970653d6d6f756e74ffff617473002c66736e616d653d002c00"]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r11 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r12 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) 20:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) 20:46:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3T9oJGUcBuB3Znc9c7fKqY0g6jUiuhC0E23ORuFAjkNEUOFE1Ea5E8477C6CYGOhvZLKJoid0VLSpFMEq6gpYiOoCBostFiZnV2JmxWjm931Ms8Dw/zJzPy+Yeb9JsV+TIDGOpnkdJJWkl6STpJi7w6n6unkcHV1afN80u8//lMx2K9er42OO5FkJckDSTbKIi+1kyvrT+/8uvXo3W9d7tz1/vpTS3O9yKEfd7Yf233v7Jsfnbn/yudffn+2yOl0/3Jdh6+YsK1dJDfPotj/RNFedAs4iHOvffhVlftbhs9pL52UqW/e25eu2+jk3nf/7th3fvjitnm2FTh8/X6negeu9IHGKZN0U5TLSerlslxerv+H/7p1vHz54qVXey9evHzh+UX3VMBh6Sbbj3xy7OMTY/n/rlXnHzi6qvw/cW7tm2p5t3WAA964YfaNAmbr9npW5b/37NV7ctD8A0eG/ENzyT80l/xDc/2X/L8w6cdswDXH+x+aS/6hueQfmkv+obnkH5prb/4BgGbpH1v0CGRgURbd/wAAAAAAAAAAAAAAAAAAAPu0k5xfXdocTNWG62de8sGf/xyB3E5GtUf1k9bge8Sjlhz/pRg0cqQYNnoaz9w55Qmm9MG8R1+PXe+N3865/pjP7lhs/asXkpXXk9zXbu9//oqcmvL8N/3D3zvPTVngXxr/fMdDT863/rjf1xZb/8xW8unD1f2f1P+UuXUwn9z/dKv7N2X9V36b8gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMzR8BAAD//wcAcYo=") 20:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) [ 1956.018015][ T4564] fuse: Unknown parameter 'Qd' [ 1956.021486][ T4565] fuse: Unknown parameter 'Qd' 20:46:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x20201) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r1) socket(0x2, 0x2, 0x1) io_setup(0x6, &(0x7f0000000280)=0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x2a}]) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0x40086203, 0x0) 20:46:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x61, 0xe0401) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:46:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000100)={r6}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, r7) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000300)={r9}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1956.071227][ T4569] loop2: detected capacity change from 0 to 128 20:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1956.125993][ T4569] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1956.171537][ T4569] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1956.237444][ T4569] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x20201) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r1) (async) socket(0x2, 0x2, 0x1) (async, rerun: 64) io_setup(0x6, &(0x7f0000000280)=0x0) (rerun: 64) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x2a}]) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r6}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0x40086203, 0x0) (rerun: 64) 20:46:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x61, 0xe0401) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:46:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000100)={r6}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) r7 = syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, r7) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000300)={r9}) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1956.311885][ T27] audit: type=1804 audit(1703364414.427:210): pid=4580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir129235989/syzkaller.16kUrG/3771/file1" dev="sda1" ino=1964 res=1 errno=0 20:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1956.386001][ T4569] EXT4-fs (loop2): get root inode failed [ 1956.391655][ T4569] EXT4-fs (loop2): mount failed 20:46:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x61, 0xe0401) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1956.526374][ T27] audit: type=1804 audit(1703364414.627:211): pid=4595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir129235989/syzkaller.16kUrG/3772/file1" dev="sda1" ino=1964 res=1 errno=0 20:46:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3T1oJGUcBvBnZnc9c7fKqY0gfhSK6ELQTrQ5G4UDOQ4RQYUTURvlTjjvsLsIgo2F9koqmyB2RktJk04RrKKmiI2gImiw0GJldnYlblaMbnbXy/x+MMxHZub/DjPPOyn2ZQI01skkp5K0kvSSdJIUe3e4o55ODldXlzbPJf3+4z8Vg/3q9drouBNJVpI8kGSjLPJSO7m8/vTOr1uP3v3Wpc5d768/tTTXixz6cWf7sd33zrz50en7L3/+5fdnipxK9y/XdfiKCdvaRXLjLIr9TxTtRbeAgzj72odfVbm/afic9tJJmfrmvX3xmo1O7n33745954cvbplnW4HD1+93qnfgSh9onDJJN0W5nKReLsvl5fp/+K9bx8uXL1x8tffihUvnn190TwUclm6y/cgnxz4+MZb/71p1/oGjq8r/E2fXvqmWd1sHOOCN62bfKGC2bq1nVf57z165JwfNP3BkyD80l/xDc8k/NNd/yf8Lk37MBlx1vP+hueQfmkv+obnkH5pL/qG59uYfAGiW/rFFj0AGFmXR/Q8AAAAAAAAAAAAAAAAAALBPO8m51aXNwVRtuHbmJR/8+c8RyO1kVHtUP2kNvkc8asnxX4pBI0eKYaOn8cztU55gSh/Me/T12PVe/+2c64/57LbF1r9yPll5Pcl97fb+56/InVOe/4Z/+HvnuSkL/Evjn+946Mn51h/3+9pi65/eSj59uLr/k/qfMjcP5pP7n251/6as/8pvU54AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAufkjAAD//8qfcY4=") 20:46:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000100)={r6}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, r7) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000300)={r9}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000100)={r6}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0x406, r7) (async) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000300)={r9}) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) (async) 20:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r1, r5, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000200)={r4, 0x9, 0x1ff, 0x3, 0x7, [0x0], [0x8, 0x1, 0x2, 0x7], [0x4, 0x6, 0x3, 0xdaa8], [0x0, 0x6596c000, 0x1ffc0, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r6}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000ea10000000002e2f66696c653100"]) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x4000) r8 = openat(r5, &(0x7f00000002c0)='./file1\x00', 0x80800, 0xcb26b1a5d2a82f52) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0x40086203, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7, 0xffffffa9, 0xffffffff}) [ 1956.654995][ T4606] loop2: detected capacity change from 0 to 128 20:46:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000300)={0x0, 0x1, 0x5f, 0x7, 0x3, [0x0, 0x0], [0x1ff, 0x8, 0x800, 0x8a], [0x9, 0x1, 0x1, 0x1], [0xfff, 0x7ce, 0x1, 0x7]}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000004c0)={r3, 0x3, 0xffffffff, 0x7fff, 0x0, [0x0, r7, r8, r12], [0x800, 0x6, 0x7fffffff, 0x80000001], [0x9, 0x6, 0x0, 0x5], [0xfff, 0x3, 0x9, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r15}) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r17, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r16, 0xc06864ce, &(0x7f00000000c0)={r18, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r19}) [ 1956.694433][ T27] audit: type=1804 audit(1703364414.807:212): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir129235989/syzkaller.16kUrG/3773/file1" dev="sda1" ino=1961 res=1 errno=0 [ 1956.736749][ T4606] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1956.761526][ T4606] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1956.805920][ T27] audit: type=1804 audit(1703364414.837:213): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir129235989/syzkaller.16kUrG/3773/file1" dev="sda1" ino=1961 res=1 errno=0 [ 1956.859631][ T4606] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1956.900676][ T27] audit: type=1804 audit(1703364414.847:214): pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir129235989/syzkaller.16kUrG/3773/file1" dev="sda1" ino=1961 res=1 errno=0 20:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000300)={0x0, 0x1, 0x5f, 0x7, 0x3, [0x0, 0x0], [0x1ff, 0x8, 0x800, 0x8a], [0x9, 0x1, 0x1, 0x1], [0xfff, 0x7ce, 0x1, 0x7]}) (async) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000004c0)={r3, 0x3, 0xffffffff, 0x7fff, 0x0, [0x0, r7, r8, r12], [0x800, 0x6, 0x7fffffff, 0x80000001], [0x9, 0x6, 0x0, 0x5], [0xfff, 0x3, 0x9, 0x1]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r15}) (async) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r17, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r16, 0xc06864ce, &(0x7f00000000c0)={r18, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r19}) 20:46:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r3, r3, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r1, r5, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000200)={r4, 0x9, 0x1ff, 0x3, 0x7, [0x0], [0x8, 0x1, 0x2, 0x7], [0x4, 0x6, 0x3, 0xdaa8], [0x0, 0x6596c000, 0x1ffc0, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, r2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r6}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000ea10000000002e2f66696c653100"]) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x4000) (async) r8 = openat(r5, &(0x7f00000002c0)='./file1\x00', 0x80800, 0xcb26b1a5d2a82f52) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7, 0xffffffa9, 0xffffffff}) [ 1956.955013][ T4606] EXT4-fs (loop2): get root inode failed [ 1956.986058][ T4606] EXT4-fs (loop2): mount failed 20:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async, rerun: 64) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000040)={r7}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000300)={0x0, 0x1, 0x5f, 0x7, 0x3, [0x0, 0x0], [0x1ff, 0x8, 0x800, 0x8a], [0x9, 0x1, 0x1, 0x1], [0xfff, 0x7ce, 0x1, 0x7]}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000004c0)={r3, 0x3, 0xffffffff, 0x7fff, 0x0, [0x0, r7, r8, r12], [0x800, 0x6, 0x7fffffff, 0x80000001], [0x9, 0x6, 0x0, 0x5], [0xfff, 0x3, 0x9, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r15}) (async, rerun: 32) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r17, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r16, 0xc06864ce, &(0x7f00000000c0)={r18, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r19}) 20:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r1, r5, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000200)={r4, 0x9, 0x1ff, 0x3, 0x7, [0x0], [0x8, 0x1, 0x2, 0x7], [0x4, 0x6, 0x3, 0xdaa8], [0x0, 0x6596c000, 0x1ffc0, 0x8]}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, r2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r6}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000ea10000000002e2f66696c653100"]) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x4000) (async) r8 = openat(r5, &(0x7f00000002c0)='./file1\x00', 0x80800, 0xcb26b1a5d2a82f52) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7, 0xffffffa9, 0xffffffff}) 20:46:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x103, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) [ 1957.258924][ T4637] loop2: detected capacity change from 0 to 128 [ 1957.298420][ T4637] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1957.327610][ T4637] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1957.373017][ T4637] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:55 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x103, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x103, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) 20:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x103, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) [ 1957.426105][ T4637] EXT4-fs (loop2): get root inode failed [ 1957.456358][ T4637] EXT4-fs (loop2): mount failed 20:46:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) syz_open_dev$dri(&(0x7f0000000140), 0xc10d, 0x4c2400) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0x40086203, 0x0) 20:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x6, 0x402000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x4605, 0x2c4800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f0000000280)={r5}) 20:46:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r2, r3, r6, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r7, 0x0, 0x0}) 20:46:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) syz_open_dev$dri(&(0x7f0000000140), 0xc10d, 0x4c2400) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0x40086203, 0x0) 20:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x6, 0x402000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x4605, 0x2c4800) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f0000000280)={r5}) 20:46:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) syz_open_dev$dri(&(0x7f0000000140), 0xc10d, 0x4c2400) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0x40086203, 0x0) [ 1957.696573][ T4665] loop2: detected capacity change from 0 to 128 [ 1957.735082][ T4665] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r2, r3, r6, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r7, 0x0, 0x0}) [ 1957.772695][ T4665] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x6, 0x402000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x4605, 0x2c4800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f0000000280)={r5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000300), 0x6, 0x402000) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [], [], [0x4]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x4605, 0x2c4800) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f0000000280)={r5}) (async) [ 1957.813883][ T4665] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1957.861973][ T4665] EXT4-fs (loop2): get root inode failed 20:46:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r2, r3, r6, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r2, r3, r6, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r7, 0x0, 0x0}) [ 1957.923407][ T4665] EXT4-fs (loop2): mount failed 20:46:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000140)={0x81, 0x1, 0x6, 0xffffffff}, 0x10) 20:46:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3T1oJGUcBvBnZnc9c7fKqY0gfjQiuhC0E21io3AgxyEiqHAiaqPcCecddhdBsLHQXkllE8TOaClp0imCVdQUsRFUBA0WWqzMzq7EzYrRze5q5veDYT4yM/93mHneSbEvE6CxTidZSdJK0kvSSVLs3+GOejo9XF1b2jqf9PuP/VgM9qvXa6PjTiVZTXJ/ks2yyIvt5MrGU7u/bD9y15uXO3e+t/Hk0lwvcuiH3Z1H9949+8aHZ+678tkX350tspLun67r6BUTtrWL5MZZFPuPKNqLbgGHce7VD76scn/T8DntpZMy9c1769I1m53c885fHfv295/fMs+2Akev3+9U78DVPtA4ZZJuinI5Sb1clsvL9f/wX7VOli9dvPRK74WLly88t+ieCjgq3WTn4Y9PfHRqLP/ftur8A8dXlf/Hz61/XS3vtQ5xwOvXzb5RwGzdWs+q/PeeuXp3Dpt/4NiQf2gu+Yfmkn9orn+T/+cn/ZgN+N/x/ofmkn9oLvmH5pJ/aC75h+ban38AoFn6JxY9AhlYlEX3PwAAAAAAAAAAAAAAAAAAwAHtJOfXlrYGU7Xh2pmXfOCnP0Ygt5NR7VH9pDX4HvGoJSd/LgaNHCmGjZ7G07dPeYIpvT/v0ddj13v9N3OuP+bT2xZb/+qFZPW1JPe22wefvyIrU57/hr/5e+fZKQv8Q+Of73jwifnWH/fb+mLrn9lOPnmouv+T+p8yNw/mk/ufbnX/pqz/8q9TngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC5+T0AAP//JFJxqg==") 20:46:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x0, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x0, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:56 executing program 5: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000400)={r0, 0x0, 0x0}) [ 1958.078529][ T4698] loop2: detected capacity change from 0 to 128 20:46:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000040)={r11}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000200)={0x0, 0x5, 0x7, 0x80000001, 0x1, [0x0, r7, r11], [0x0, 0x10001, 0x80, 0xfcf], [0x200, 0xfffffff7, 0x81, 0x5], [0x3, 0x3, 0x1000, 0x4]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r12 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r13 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r13, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r12, 0xc00464b4, &(0x7f0000000100)={r14}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1958.127186][ T4698] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1958.155476][ T4698] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) (async) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000140)={0x81, 0x1, 0x6, 0xffffffff}, 0x10) 20:46:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x0, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:56 executing program 5: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000400)={r0, 0x0, 0x0}) [ 1958.204349][ T4698] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) fcntl$dupfd(r1, 0x0, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x5c}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r13, r12], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r14, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000640)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x3, 0x0, r13}) 20:46:56 executing program 5: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000400)={r0, 0x0, 0x0}) [ 1958.263751][ T4698] EXT4-fs (loop2): get root inode failed [ 1958.294310][ T4698] EXT4-fs (loop2): mount failed 20:46:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r4, r4, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={r7}) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000040)={r11}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000200)={0x0, 0x5, 0x7, 0x80000001, 0x1, [0x0, r7, r11], [0x0, 0x10001, 0x80, 0xfcf], [0x200, 0xfffffff7, 0x81, 0x5], [0x3, 0x3, 0x1000, 0x4]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async, rerun: 32) r12 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async, rerun: 32) r13 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r13, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r12, 0xc00464b4, &(0x7f0000000100)={r14}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1958.335979][ T27] audit: type=1804 audit(1703364416.447:215): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir129235989/syzkaller.16kUrG/3774/file1" dev="sda1" ino=1946 res=1 errno=0 20:46:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c36fad068d4a0adfe7986ed0362196a0fdbfbd5ed898bee461149e422a99e805bb886fd34f86163a6688969244d8fa28d98263daafd57e67343d06f5cbd8c5c1d5a315972ef8b612a62cfc60ae01dfca139e2c75634167a624aca879e3e0b89513cee4d18c9c76c5db83a680", 0x6c, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={r3, 0x5b, &(0x7f0000000100)=""/91}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:46:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3T1oJGUcBvBnZnc9c7fKqY0gfjQiuhC0E21OBIUDOQ4RQYUTURvlTjjvsLsIgo2F9koqmyB2RktJk04RrKKmiI2gImiw0GJldnYlblaMbnbXy/x+MMxHZub/DjPPOyn2ZQI01skkp5K0kvSSdJIUe3e4o55ODldXlzbPJf3+4z8Vg/3q9drouBNJVpLcn2SjLPJSO7m8/vTOr1uP3vXWpc6d768/tTTXixz6cWf7sd33zrz50en7Ln/+5fdnipxK9y/XdfiKCdvaRXLjLIr9TxTtRbeAgzj72odfVbm/afic9tJJmfrmvX3xmo1O7nn3745954cvbplnW4HD1+93qnfgSh9onDJJN0W5nKReLsvl5fp/+K9bx8uXL1x8tffihUvnn190TwUclm6y/cgnxz4+MZb/71p1/oGjq8r/E2fXvqmWd1sHOOCN62bfKGC2bq1nVf57z165OwfNP3BkyD80l/xDc8k/NNd/yf8Lk37MBlx1vP+hueQfmkv+obnkH5pL/qG59uYfAGiW/rFFj0AGFmXR/Q8AAAAAAAAAAAAAAAAAALBPO8m51aXNwVRtuHbmJR/4+c8RyO1kVHtUP2kNvkc8asnxX4pBI0eKYaOn8cztU55gSh/Me/T12PVe/+2c64/57LbF1r9yPll5Pcm97fb+56/Iw1Oe/4Z/+HvnuSkL/Evjn+948Mn51h/3+9pi65/eSj59qLr/k/qfMjcP5pP7n251/6as/8pvU54AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAufkjAAD//3cNca0=") 20:46:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async, rerun: 64) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000140)={0x81, 0x1, 0x6, 0xffffffff}, 0x10) 20:46:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c36fad068d4a0adfe7986ed0362196a0fdbfbd5ed898bee461149e422a99e805bb886fd34f86163a6688969244d8fa28d98263daafd57e67343d06f5cbd8c5c1d5a315972ef8b612a62cfc60ae01dfca139e2c75634167a624aca879e3e0b89513cee4d18c9c76c5db83a680", 0x6c, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={r3, 0x5b, &(0x7f0000000100)=""/91}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1958.525105][ T4736] loop2: detected capacity change from 0 to 128 [ 1958.550581][ T4736] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) fcntl$dupfd(r1, 0x0, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r3, r3, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x5c}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5}) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) (async) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r13, r12], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r14, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000640)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x3, 0x0, r13}) [ 1958.577884][ T4736] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c36fad068d4a0adfe7986ed0362196a0fdbfbd5ed898bee461149e422a99e805bb886fd34f86163a6688969244d8fa28d98263daafd57e67343d06f5cbd8c5c1d5a315972ef8b612a62cfc60ae01dfca139e2c75634167a624aca879e3e0b89513cee4d18c9c76c5db83a680", 0x6c, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={r3, 0x5b, &(0x7f0000000100)=""/91}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c36fad068d4a0adfe7986ed0362196a0fdbfbd5ed898bee461149e422a99e805bb886fd34f86163a6688969244d8fa28d98263daafd57e67343d06f5cbd8c5c1d5a315972ef8b612a62cfc60ae01dfca139e2c75634167a624aca879e3e0b89513cee4d18c9c76c5db83a680", 0x6c}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={r3, 0x5b, &(0x7f0000000100)=""/91}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) 20:46:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000040)={r11}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000200)={0x0, 0x5, 0x7, 0x80000001, 0x1, [0x0, r7, r11], [0x0, 0x10001, 0x80, 0xfcf], [0x200, 0xfffffff7, 0x81, 0x5], [0x3, 0x3, 0x1000, 0x4]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r12 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r13 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r13, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r12, 0xc00464b4, &(0x7f0000000100)={r14}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1958.645315][ T4736] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1958.683787][ T4736] EXT4-fs (loop2): get root inode failed [ 1958.696316][ T4736] EXT4-fs (loop2): mount failed 20:46:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000140)={0x0, 0xb03, 0x81, 0x81, 0x4a, 0x5, 0x4e}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) 20:46:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x800001, 0x40000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:46:56 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) fcntl$dupfd(r1, 0x0, r1) (async) fcntl$dupfd(r1, 0x0, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x5c}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) (async) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r13, r12], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r14, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000640)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x3, 0x0, r13}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000640)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x3, 0x0, r13}) 20:46:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1958.891578][ T4768] loop2: detected capacity change from 0 to 128 [ 1958.901299][ T27] audit: type=1804 audit(1703364417.017:216): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir129235989/syzkaller.16kUrG/3776/file1" dev="sda1" ino=1951 res=1 errno=0 20:46:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={0x0, r2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r7, r2, r2, r2, r2], 0x5, 0x800}) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r9, r9, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000340)={0x0, r2, r8, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 20:46:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000140)={0x0, 0xb03, 0x81, 0x81, 0x4a, 0x5, 0x4e}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) 20:46:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x800001, 0x40000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1958.933060][ T4768] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1958.970972][ T4768] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1958.983323][ T4768] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x9, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r8, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r8, r8, &(0x7f0000000040)=0x3f00, 0x7fff) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540), 0x684081, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[r2], 0x1}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) ioctl$FS_IOC_RESVSP(r10, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f00000004c0)={r7, 0x9, 0x7, 0x6e, 0x3, [0x0], [0x40, 0x80000000, 0x9, 0x80000000], [0x20, 0x7, 0x5, 0x768d0940], [0x4, 0x10000, 0x9, 0x8000000000000001]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000380)={r11}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r13, 0x2, 0xffffffff, 0x4, 0x2, [], [0x1, 0x8000, 0x1ff, 0x8], [0x7f, 0x4, 0x6, 0x487d], [0x5, 0x5, 0x0, 0x7ff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r12}) 20:46:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x800001, 0x40000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x800001, 0x40000) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) [ 1959.037841][ T4768] EXT4-fs (loop2): get root inode failed [ 1959.050022][ T4768] EXT4-fs (loop2): mount failed 20:46:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={0x0, r2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r7, r2, r2, r2, r2], 0x5, 0x800}) (async, rerun: 32) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (rerun: 32) pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r9, r9, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000340)={0x0, r2, r8, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 20:46:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000140)={0x0, 0xb03, 0x81, 0x81, 0x4a, 0x5, 0x4e}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) 20:46:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) 20:46:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) 20:46:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x9, 0x7}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) [ 1959.203079][ T4796] loop2: detected capacity change from 0 to 128 [ 1959.238873][ T4796] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async, rerun: 32) syz_open_dev$dri(0x0, 0x60f, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={0x0, r2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r7, r2, r2, r2, r2], 0x5, 0x800}) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async, rerun: 64) sendfile(r9, r9, &(0x7f0000000040)=0x3f00, 0x7fff) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000340)={0x0, r2, r8, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 20:46:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x9, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r8, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async, rerun: 32) sendfile(r8, r8, &(0x7f0000000040)=0x3f00, 0x7fff) (async, rerun: 32) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540), 0x684081, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[r2], 0x1}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r10, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f00000004c0)={r7, 0x9, 0x7, 0x6e, 0x3, [0x0], [0x40, 0x80000000, 0x9, 0x80000000], [0x20, 0x7, 0x5, 0x768d0940], [0x4, 0x10000, 0x9, 0x8000000000000001]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000380)={r11}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r13, 0x2, 0xffffffff, 0x4, 0x2, [], [0x1, 0x8000, 0x1ff, 0x8], [0x7f, 0x4, 0x6, 0x487d], [0x5, 0x5, 0x0, 0x7ff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r12}) [ 1959.272823][ T4796] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) [ 1959.318625][ T4796] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) 20:46:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x9, 0x7}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) [ 1959.382134][ T4796] EXT4-fs (loop2): get root inode failed [ 1959.394651][ T4796] EXT4-fs (loop2): mount failed 20:46:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3T1oJGUcBvBnZnc9c7fKqY0gfjQiuhC0E23ORuFAjkNEUOFE1Ea5E8477G4FwcZCe+UqmyB2RktJk04RrKKmiI2gImiw0GJldnYlblaMbnZXM78fDPORmfm/w8zzTop9mQCNdTLJqSStJL0knSTF3h3uqKeTo9WrK5vnksHgsR+L4X71em183Ikk/ST3J9koi7zYTi6vP7Xzy9Yjd715qXPne+tPriz0Ikd+2Nl+dPfdM298ePq+y5998d2ZIqfS/dN1Hb5iyrZ2kdw4j2L/EUV72S3gIM6++sGXVe5vGj2nvXRSpr55b128ZqOTe975q2Pf/v7zWxbZVuDwDQad6h3YHwCNUybppihXk9TLZbm6Wv8P/1XrePnShYuv9F64cOn8c8vuqYDD0k22H/742EcnJvL/bavOP3B0Vfl//Oza19XybusAB7x+3fwbBczXrfWsyn/vmSt356D5B44M+Yfmkn9oLvmH5vo3+X9+2o/ZgP8d739oLvmH5pJ/aC75h+aSf2iuvfkHAJplcGzZI5CBZVl2/wMAAAAAAAAAAAAAAAAAAOzTTnLu6srmcKo2XDv3kg/89McI5HYyrj2un7SG3yMet+T4z8WwkWPFqNGzePr2GU8wo/cXPfp64nqv/2bB9Sd8etty6185n/RfS3Jvu73/+SvSn/H8N/zN3zvPzljgH5r8fMeDTyy2/qTf1pZb//RW8slD1f2f1v+UuXk4n97/dKv7N2P9l3+d8QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAszO8BAAD//172ceo=") 20:46:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) 20:46:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) 20:46:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x9, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x9, 0x7}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:46:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2}) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000080)="b272f9967961ba608905353a59aad5dd0acc5a79d3c47cc662ed226c704380e5fcde733c3a51208bc1c8c75cfd0739bc2e8b17ea76c5b4cdf93e65c51a09fccfbe09587e3be9ee2765b171526c454d02888841", 0x53, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) [ 1959.575314][ T4833] loop2: detected capacity change from 0 to 128 20:46:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x9, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r8, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r8, r8, &(0x7f0000000040)=0x3f00, 0x7fff) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540), 0x684081, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[r2], 0x1}) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) ioctl$FS_IOC_RESVSP(r10, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f00000004c0)={r7, 0x9, 0x7, 0x6e, 0x3, [0x0], [0x40, 0x80000000, 0x9, 0x80000000], [0x20, 0x7, 0x5, 0x768d0940], [0x4, 0x10000, 0x9, 0x8000000000000001]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000380)={r11}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r13, 0x2, 0xffffffff, 0x4, 0x2, [], [0x1, 0x8000, 0x1ff, 0x8], [0x7f, 0x4, 0x6, 0x487d], [0x5, 0x5, 0x0, 0x7ff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r12}) 20:46:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) 20:46:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000004c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0xa}) r3 = dup3(r0, r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x5, 0x81, 0x5e1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f0000000540)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0x40086203, 0x0) [ 1959.618188][ T4833] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2}) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1959.677047][ T4833] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1959.706814][ T4833] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000004c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0xa}) r3 = dup3(r0, r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x5, 0x81, 0x5e1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f0000000540)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0x40086203, 0x0) [ 1959.737044][ T4833] EXT4-fs (loop2): get root inode failed [ 1959.743901][ T4833] EXT4-fs (loop2): mount failed 20:46:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000080)="b272f9967961ba608905353a59aad5dd0acc5a79d3c47cc662ed226c704380e5fcde733c3a51208bc1c8c75cfd0739bc2e8b17ea76c5b4cdf93e65c51a09fccfbe09587e3be9ee2765b171526c454d02888841", 0x53, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000080)="b272f9967961ba608905353a59aad5dd0acc5a79d3c47cc662ed226c704380e5fcde733c3a51208bc1c8c75cfd0739bc2e8b17ea76c5b4cdf93e65c51a09fccfbe09587e3be9ee2765b171526c454d02888841", 0x53}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (async) 20:46:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2}) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:46:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000004c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0xa}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000004c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0xa}) dup3(r0, r0, 0x0) (async) r3 = dup3(r0, r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x5, 0x81, 0x5e1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x5, 0x81, 0x5e1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f0000000540)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0x40086203, 0x0) 20:46:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x21082) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000200)={0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000080)="b272f9967961ba608905353a59aad5dd0acc5a79d3c47cc662ed226c704380e5fcde733c3a51208bc1c8c75cfd0739bc2e8b17ea76c5b4cdf93e65c51a09fccfbe09587e3be9ee2765b171526c454d02888841", 0x53, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000080)="b272f9967961ba608905353a59aad5dd0acc5a79d3c47cc662ed226c704380e5fcde733c3a51208bc1c8c75cfd0739bc2e8b17ea76c5b4cdf93e65c51a09fccfbe09587e3be9ee2765b171526c454d02888841", 0x53}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (async) 20:46:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) [ 1959.978147][ T4878] loop2: detected capacity change from 0 to 128 [ 1960.017431][ T4878] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x21082) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000200)={0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x21082) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000200)={0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) (async) [ 1960.066656][ T4878] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1960.115839][ T4878] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1960.179064][ T4878] EXT4-fs (loop2): get root inode failed [ 1960.229810][ T4878] EXT4-fs (loop2): mount failed 20:46:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x21082) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000200)={0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:46:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1960.312851][T16248] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 20:46:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) [ 1960.463784][ T4907] loop2: detected capacity change from 0 to 128 [ 1960.493617][ T4907] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1960.533364][ T4907] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1960.566847][ T4907] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1960.582284][ T4907] EXT4-fs (loop2): get root inode failed [ 1960.601880][ T4907] EXT4-fs (loop2): mount failed 20:46:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) 20:46:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r9, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r9, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r1}) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r14, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r15, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r14, 0xc06864ce, &(0x7f00000000c0)={r16, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r14, 0xc008640a, &(0x7f0000000040)={r17}) ioctl$DRM_IOCTL_MODE_ADDFB2(r11, 0xc06864b8, &(0x7f0000000340)={r12, 0xfffff57b, 0x8, 0x51020615, 0x1, [r13, r17, r4, r5], [0x8af, 0x3, 0x376a377, 0x4], [0x9, 0x10000, 0x7, 0x7], [0x5, 0x2, 0x4, 0xa21]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r18}) 20:46:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) 20:46:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r9, 0x0}) (async, rerun: 32) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (rerun: 32) ioctl$FS_IOC_RESVSP(r11, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r9, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r1}) (async) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r14, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r15, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r14, 0xc06864ce, &(0x7f00000000c0)={r16, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r14, 0xc008640a, &(0x7f0000000040)={r17}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r11, 0xc06864b8, &(0x7f0000000340)={r12, 0xfffff57b, 0x8, 0x51020615, 0x1, [r13, r17, r4, r5], [0x8af, 0x3, 0x376a377, 0x4], [0x9, 0x10000, 0x7, 0x7], [0x5, 0x2, 0x4, 0xa21]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r18}) 20:46:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) [ 1960.883287][ T4921] loop2: detected capacity change from 0 to 128 20:46:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4000000000000015, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x80, 0xc270, 0x7e}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r7}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_setup(0x6166, &(0x7f0000000340)={0x0, 0xe86f, 0x2, 0x2, 0x2b, 0x0, r8}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r11, &(0x7f0000000440)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r12}}) [ 1960.923910][ T4921] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1960.950604][ T4921] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:46:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) [ 1960.986419][ T4921] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1961.016066][ T4921] EXT4-fs (loop2): get root inode failed [ 1961.028724][ T4921] EXT4-fs (loop2): mount failed 20:46:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r2}) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r9, 0x0}) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r9, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r1}) (async) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r14, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r15, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r14, 0xc06864ce, &(0x7f00000000c0)={r16, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r14, 0xc008640a, &(0x7f0000000040)={r17}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r11, 0xc06864b8, &(0x7f0000000340)={r12, 0xfffff57b, 0x8, 0x51020615, 0x1, [r13, r17, r4, r5], [0x8af, 0x3, 0x376a377, 0x4], [0x9, 0x10000, 0x7, 0x7], [0x5, 0x2, 0x4, 0xa21]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r18}) 20:46:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) 20:46:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4000000000000015, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x80, 0xc270, 0x7e}) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r7}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) syz_io_uring_setup(0x6166, &(0x7f0000000340)={0x0, 0xe86f, 0x2, 0x2, 0x2b, 0x0, r8}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r11, &(0x7f0000000440)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r12}}) 20:46:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000200), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000004c0)="63e4700a6c1f399ea95e333ed5cb3a03460b48621da583a7c9389913d9a6c7b4dedd961c1258b48b1166fb49fbd2c98fc6cc3e6d703f5f0392b8cb0ffe3baaa28ee1d94032d6b27794d458557cd112dd7338139a29e8e80a4410501fd72ab44ebf13ae60239c5169ecf3cb69f5241ebce381c0f22a34f2ce96e67a5039662d5e49283a8e9844c9261d8e12f9cc09885ba3e96fdc1eb7303c21fd0f436cc4f6748e6fef472f04733c33a30945173633d00336debd936cefcac11c1f4fca2caa1555b22d7c66c889d1a7bf612cf821a45a99928461148710e7", 0xd8}], 0x1, 0x8) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000280)={r2, 0x80000001, 0xfffffffb, 0x1, 0x3, [], [0x7, 0x1, 0x9, 0x6], [0x5, 0x3, 0x3, 0xd05], [0x8c6, 0x401, 0x6, 0x1]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, 0x0, 0x80000) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) sched_setscheduler(0x0, 0x3, &(0x7f0000000540)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) 20:46:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:46:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) 20:46:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4000000000000015, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x80, 0xc270, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x80, 0xc270, 0x7e}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r7}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_setup(0x6166, &(0x7f0000000340)={0x0, 0xe86f, 0x2, 0x2, 0x2b, 0x0, r8}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r11, &(0x7f0000000440)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r12}}) 20:46:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000240)={r11, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000040)={r15}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000200)={r11, 0x9, 0x5, 0x1, 0x3, [r5, r15, r16, r6], [0x9, 0x7f, 0x401, 0x6], [0x4, 0x6, 0x9], [0x50, 0x5, 0xeb, 0xa7]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) [ 1961.314753][ T4947] loop2: detected capacity change from 0 to 128 20:46:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) [ 1961.392260][ T4947] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:46:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000240)={r11, 0x0, 0x0, 0x0, 0x0}) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000040)={r15}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000200)={r11, 0x9, 0x5, 0x1, 0x3, [r5, r15, r16, r6], [0x9, 0x7f, 0x401, 0x6], [0x4, 0x6, 0x9], [0x50, 0x5, 0xeb, 0xa7]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) [ 1961.435042][ T4947] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1961.457342][ T4947] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:46:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) [ 1961.532449][ T4947] EXT4-fs (loop2): get root inode failed [ 1961.538719][ T4947] EXT4-fs (loop2): mount failed 20:46:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)) 20:46:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000240)={r11, 0x0, 0x0, 0x0, 0x0}) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000040)={r15}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000200)={r11, 0x9, 0x5, 0x1, 0x3, [r5, r15, r16, r6], [0x9, 0x7f, 0x401, 0x6], [0x4, 0x6, 0x9], [0x50, 0x5, 0xeb, 0xa7]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0x40086203, 0x0) 20:46:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:46:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") [ 1961.786445][ T4974] loop2: detected capacity change from 0 to 128 [ 1961.815887][ T4974] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1961.850577][ T4974] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1961.873514][ T4974] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1961.892878][ T4974] EXT4-fs (loop2): get root inode failed [ 1961.901318][ T4974] EXT4-fs (loop2): mount failed 20:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000200), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000004c0)="63e4700a6c1f399ea95e333ed5cb3a03460b48621da583a7c9389913d9a6c7b4dedd961c1258b48b1166fb49fbd2c98fc6cc3e6d703f5f0392b8cb0ffe3baaa28ee1d94032d6b27794d458557cd112dd7338139a29e8e80a4410501fd72ab44ebf13ae60239c5169ecf3cb69f5241ebce381c0f22a34f2ce96e67a5039662d5e49283a8e9844c9261d8e12f9cc09885ba3e96fdc1eb7303c21fd0f436cc4f6748e6fef472f04733c33a30945173633d00336debd936cefcac11c1f4fca2caa1555b22d7c66c889d1a7bf612cf821a45a99928461148710e7", 0xd8}], 0x1, 0x8) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000280)={r2, 0x80000001, 0xfffffffb, 0x1, 0x3, [], [0x7, 0x1, 0x9, 0x6], [0x5, 0x3, 0x3, 0xd05], [0x8c6, 0x401, 0x6, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r4}) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x0, 0x0) (rerun: 64) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, 0x0, 0x80000) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000540)) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) (async) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) 20:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) 20:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0x40086203, 0x0) 20:47:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000200), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000004c0)="63e4700a6c1f399ea95e333ed5cb3a03460b48621da583a7c9389913d9a6c7b4dedd961c1258b48b1166fb49fbd2c98fc6cc3e6d703f5f0392b8cb0ffe3baaa28ee1d94032d6b27794d458557cd112dd7338139a29e8e80a4410501fd72ab44ebf13ae60239c5169ecf3cb69f5241ebce381c0f22a34f2ce96e67a5039662d5e49283a8e9844c9261d8e12f9cc09885ba3e96fdc1eb7303c21fd0f436cc4f6748e6fef472f04733c33a30945173633d00336debd936cefcac11c1f4fca2caa1555b22d7c66c889d1a7bf612cf821a45a99928461148710e7", 0xd8}], 0x1, 0x8) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000280)={r2, 0x80000001, 0xfffffffb, 0x1, 0x3, [], [0x7, 0x1, 0x9, 0x6], [0x5, 0x3, 0x3, 0xd05], [0x8c6, 0x401, 0x6, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, 0x0, 0x80000) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) sched_setscheduler(0x0, 0x3, &(0x7f0000000540)) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) (async) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) [ 1962.231595][ T4985] loop2: detected capacity change from 0 to 128 20:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) 20:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0x40086203, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r7}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0x40086203, 0x0) (async) [ 1962.308166][ T4985] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1962.348572][ T4985] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r5, 0x9, 0xffffffff, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000340)={r10, 0x4, 0x10000, 0x40000000, 0x1, [], [0x3ff, 0x5, 0x401, 0x5], [0x6, 0x3, 0x100, 0xffffffff], [0x2, 0x5, 0x1, 0x10001]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) [ 1962.395857][ T4985] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1962.428585][ T4985] EXT4-fs (loop2): get root inode failed [ 1962.434254][ T4985] EXT4-fs (loop2): mount failed 20:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) 20:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r7}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0x40086203, 0x0) 20:47:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r5, 0x9, 0xffffffff, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000340)={r10, 0x4, 0x10000, 0x40000000, 0x1, [], [0x3ff, 0x5, 0x401, 0x5], [0x6, 0x3, 0x100, 0xffffffff], [0x2, 0x5, 0x1, 0x10001]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r7}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r5, 0x9, 0xffffffff, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000340)={r10, 0x4, 0x10000, 0x40000000, 0x1, [], [0x3ff, 0x5, 0x401, 0x5], [0x6, 0x3, 0x100, 0xffffffff], [0x2, 0x5, 0x1, 0x10001]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) (async) 20:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 20:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000140)) 20:47:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r7}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r5, 0x9, 0xffffffff, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000340)={r10, 0x4, 0x10000, 0x40000000, 0x1, [], [0x3ff, 0x5, 0x401, 0x5], [0x6, 0x3, 0x100, 0xffffffff], [0x2, 0x5, 0x1, 0x10001]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000340)={r10, 0x4, 0x10000, 0x40000000, 0x1, [], [0x3ff, 0x5, 0x401, 0x5], [0x6, 0x3, 0x100, 0xffffffff], [0x2, 0x5, 0x1, 0x10001]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) [ 1962.674618][ T5009] loop2: detected capacity change from 0 to 128 [ 1962.708775][ T5009] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) [ 1962.754196][ T5009] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000140)) [ 1962.817954][ T5009] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={r3, 0x0, r4}) r5 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000080)={r7, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r8, 0x0, 0x0}) 20:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) [ 1962.892946][ T5009] EXT4-fs (loop2): get root inode failed [ 1962.917036][ T5009] EXT4-fs (loop2): mount failed 20:47:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={r3, 0x0, r4}) r5 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000080)={r7, 0x0, r8}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r8, 0x0, 0x0}) 20:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) 20:47:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000140)) 20:47:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={r5}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000580)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x5, 0x6}) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x21, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000200)={r5, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r12}) [ 1963.142538][ T5033] loop2: detected capacity change from 0 to 128 20:47:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={r3, 0x0, r4}) r5 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000080)={r7, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r8, 0x0, 0x0}) 20:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) [ 1963.193096][ T5033] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={r5}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000580)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x5, 0x6}) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x21, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000200)={r5, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r12}) [ 1963.252592][ T5033] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1963.316603][ T5033] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) 20:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1963.389335][ T5033] EXT4-fs (loop2): get root inode failed [ 1963.399772][ T5033] EXT4-fs (loop2): mount failed 20:47:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:01 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={r5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={r5}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000580)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x5, 0x6}) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x21, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x21, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000200)={r5, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r12}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r12}) 20:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1963.604646][ T5069] loop2: detected capacity change from 0 to 128 [ 1963.639135][ T5069] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) lseek(0xffffffffffffffff, 0x1, 0x2) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x57, 0xffffffffffffffff, 0x80000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="be0b9d1db04f5b83e747613dc350d8093a050dabf4ef4b2a4f726a7a1e51c2d83f266e74df81f89cafb6f7d07c117b0b97a6229afd4af834a7", &(0x7f00000000c0)=@udp6=r5, 0x4}, 0x20) process_mrelease(r5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38}) pidfd_send_signal(r5, 0x9, &(0x7f0000000240)={0x1, 0x5, 0x6}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000016c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000001700)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000001a00)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000240)={&(0x7f0000000200)=[r6, 0x0, r7, 0x0], 0x1, 0x4, 0x7}) 20:47:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140)=[r4, r6, 0x0, 0x0], 0x4, 0x0, 0x0, 0x1000, 0x5, 0x6, 0x9, {0xff, 0x8, 0x4, 0x1e, 0x8, 0x3, 0xf4, 0x7, 0x4, 0x84b, 0x101, 0x3, 0x0, 0x1f, "683f529f3ab6074685b1ce2b8f9a8cd50472f4668f584bb26d3e92d416a91ace"}}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000040)="ef67473683c31e54e15a33ba031b49adff7ed990d9bef65b9d505ad147f25d64141619c6aa8696f991d477ef9f056b611d123f6725d0ddc15c8c77b680a94c133ea04cc1e990b03ccc9adbdf9ea5a2b018435481e1cfba8f0c66db5c275c", 0x5e, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r7, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000280)={r9, 0xffffff36, 0x7ff, 0x40c, 0x0, [], [0x7, 0x7, 0x3, 0x8], [0x8000, 0x101, 0x4, 0xbff], [0x8, 0x7fffffff, 0x100000001, 0x2]}) [ 1963.666955][ T5069] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1963.691670][ T5069] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140)=[r4, r6, 0x0, 0x0], 0x4, 0x0, 0x0, 0x1000, 0x5, 0x6, 0x9, {0xff, 0x8, 0x4, 0x1e, 0x8, 0x3, 0xf4, 0x7, 0x4, 0x84b, 0x101, 0x3, 0x0, 0x1f, "683f529f3ab6074685b1ce2b8f9a8cd50472f4668f584bb26d3e92d416a91ace"}}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000040)="ef67473683c31e54e15a33ba031b49adff7ed990d9bef65b9d505ad147f25d64141619c6aa8696f991d477ef9f056b611d123f6725d0ddc15c8c77b680a94c133ea04cc1e990b03ccc9adbdf9ea5a2b018435481e1cfba8f0c66db5c275c", 0x5e, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r7, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000280)={r9, 0xffffff36, 0x7ff, 0x40c, 0x0, [], [0x7, 0x7, 0x3, 0x8], [0x8000, 0x101, 0x4, 0xbff], [0x8, 0x7fffffff, 0x100000001, 0x2]}) [ 1963.742182][ T5069] EXT4-fs (loop2): get root inode failed [ 1963.765694][ T5069] EXT4-fs (loop2): mount failed 20:47:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) lseek(0xffffffffffffffff, 0x1, 0x2) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x57, 0xffffffffffffffff, 0x80000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="be0b9d1db04f5b83e747613dc350d8093a050dabf4ef4b2a4f726a7a1e51c2d83f266e74df81f89cafb6f7d07c117b0b97a6229afd4af834a7", &(0x7f00000000c0)=@udp6=r5, 0x4}, 0x20) (async) process_mrelease(r5, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38}) (async) pidfd_send_signal(r5, 0x9, &(0x7f0000000240)={0x1, 0x5, 0x6}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000016c0)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000001700)={r6}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000001a00)={r6}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000240)={&(0x7f0000000200)=[r6, 0x0, r7, 0x0], 0x1, 0x4, 0x7}) 20:47:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140)=[r4, r6, 0x0, 0x0], 0x4, 0x0, 0x0, 0x1000, 0x5, 0x6, 0x9, {0xff, 0x8, 0x4, 0x1e, 0x8, 0x3, 0xf4, 0x7, 0x4, 0x84b, 0x101, 0x3, 0x0, 0x1f, "683f529f3ab6074685b1ce2b8f9a8cd50472f4668f584bb26d3e92d416a91ace"}}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000040)="ef67473683c31e54e15a33ba031b49adff7ed990d9bef65b9d505ad147f25d64141619c6aa8696f991d477ef9f056b611d123f6725d0ddc15c8c77b680a94c133ea04cc1e990b03ccc9adbdf9ea5a2b018435481e1cfba8f0c66db5c275c", 0x5e, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r7, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000280)={r9, 0xffffff36, 0x7ff, 0x40c, 0x0, [], [0x7, 0x7, 0x3, 0x8], [0x8000, 0x101, 0x4, 0xbff], [0x8, 0x7fffffff, 0x100000001, 0x2]}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140)=[r4, r6, 0x0, 0x0], 0x4, 0x0, 0x0, 0x1000, 0x5, 0x6, 0x9, {0xff, 0x8, 0x4, 0x1e, 0x8, 0x3, 0xf4, 0x7, 0x4, 0x84b, 0x101, 0x3, 0x0, 0x1f, "683f529f3ab6074685b1ce2b8f9a8cd50472f4668f584bb26d3e92d416a91ace"}}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000040)="ef67473683c31e54e15a33ba031b49adff7ed990d9bef65b9d505ad147f25d64141619c6aa8696f991d477ef9f056b611d123f6725d0ddc15c8c77b680a94c133ea04cc1e990b03ccc9adbdf9ea5a2b018435481e1cfba8f0c66db5c275c", 0x5e}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r7, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000280)={r9, 0xffffff36, 0x7ff, 0x40c, 0x0, [], [0x7, 0x7, 0x3, 0x8], [0x8000, 0x101, 0x4, 0xbff], [0x8, 0x7fffffff, 0x100000001, 0x2]}) (async) 20:47:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:02 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) lseek(0xffffffffffffffff, 0x1, 0x2) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x57, 0xffffffffffffffff, 0x80000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="be0b9d1db04f5b83e747613dc350d8093a050dabf4ef4b2a4f726a7a1e51c2d83f266e74df81f89cafb6f7d07c117b0b97a6229afd4af834a7", &(0x7f00000000c0)=@udp6=r5, 0x4}, 0x20) process_mrelease(r5, 0x0) (async) process_mrelease(r5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38}) pidfd_send_signal(r5, 0x9, &(0x7f0000000240)={0x1, 0x5, 0x6}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000016c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000001700)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000001a00)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000240)={&(0x7f0000000200)=[r6, 0x0, r7, 0x0], 0x1, 0x4, 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000240)={&(0x7f0000000200)=[r6, 0x0, r7, 0x0], 0x1, 0x4, 0x7}) 20:47:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1964.017588][ T5104] loop2: detected capacity change from 0 to 128 [ 1964.069837][ T5104] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1964.111590][ T5104] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1964.155556][ T5104] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1964.189119][ T5104] EXT4-fs (loop2): get root inode failed [ 1964.195432][ T5104] EXT4-fs (loop2): mount failed 20:47:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1964.417375][ T5121] loop2: detected capacity change from 0 to 128 [ 1964.447845][ T5121] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1964.471121][ T5121] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1964.498430][ T5121] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1964.537962][ T5121] EXT4-fs (loop2): get root inode failed [ 1964.565220][ T5121] EXT4-fs (loop2): mount failed 20:47:02 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:02 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1964.776220][ T5136] loop2: detected capacity change from 0 to 128 [ 1964.821266][ T5136] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1964.851952][ T5136] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1964.880259][ T5136] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:03 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1964.940506][ T5136] EXT4-fs (loop2): get root inode failed [ 1964.958885][ T5136] EXT4-fs (loop2): mount failed 20:47:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1965.116341][ T5154] loop2: detected capacity change from 0 to 128 [ 1965.161583][ T5154] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1965.185705][ T5154] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1965.216797][ T5154] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1965.258171][ T5154] EXT4-fs (loop2): get root inode failed [ 1965.285982][ T5154] EXT4-fs (loop2): mount failed 20:47:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1965.498082][ T5169] loop2: detected capacity change from 0 to 128 [ 1965.524989][ T5169] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x3c, r3, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000240)={r10, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r4, 0x5, 0x4, 0xf0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x6, 0x0, 0x79], [0x0, 0x4, 0x2, 0x40], [0x5, 0x8, 0x8, 0x8]}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000040)={r15}) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r17, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r16, 0xc06864ce, &(0x7f00000000c0)={r18, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r16, 0xc008640a, &(0x7f0000000040)={r19}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000340)={r10, 0x7, 0x1, 0x910, 0x1, [r11, r7, r15, r19], [0x4, 0x2, 0x1c, 0x4], [0x2, 0x7ff, 0x6, 0x2], [0x3, 0x9, 0x7f, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r20, 0x40086203, 0x0) 20:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1965.554900][ T5169] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1965.576454][ T5169] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1965.615048][ T5169] EXT4-fs (loop2): get root inode failed [ 1965.641024][ T5169] EXT4-fs (loop2): mount failed 20:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x3c, r3, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000240)={r10, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r4, 0x5, 0x4, 0xf0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x6, 0x0, 0x79], [0x0, 0x4, 0x2, 0x40], [0x5, 0x8, 0x8, 0x8]}) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000040)={r15}) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r17, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r16, 0xc06864ce, &(0x7f00000000c0)={r18, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r16, 0xc008640a, &(0x7f0000000040)={r19}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000340)={r10, 0x7, 0x1, 0x910, 0x1, [r11, r7, r15, r19], [0x4, 0x2, 0x1c, 0x4], [0x2, 0x7ff, 0x6, 0x2], [0x3, 0x9, 0x7f, 0x5]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r20, 0x40086203, 0x0) 20:47:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x0, r3, 0x2, 0x1904, 0x4, 0x4, 0x2, 0x4729, 0x1f, 0x4, 0x1dbe}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200)={0x202400, 0x58, 0x26}, 0x18) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10}) r11 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r11, 0xc01864b1, &(0x7f0000000240)={r13, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000240)={r8, r10, r13, 0x3, 0x8, 0x5d7, 0x5, 0x7ff, 0x6, 0x2, 0x0, 0x7fffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r5}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1965.896484][ T5184] loop2: detected capacity change from 0 to 128 [ 1965.929080][ T5184] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x3c, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x3c, r3, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000240)={r10, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000240)={r10, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r4, 0x5, 0x4, 0xf0, 0x0, [], [0x0, 0x6, 0x0, 0x79], [0x0, 0x4, 0x2, 0x40], [0x5, 0x8, 0x8, 0x8]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r4, 0x5, 0x4, 0xf0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x6, 0x0, 0x79], [0x0, 0x4, 0x2, 0x40], [0x5, 0x8, 0x8, 0x8]}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f00000000c0)={r14}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000040)={r15}) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r17, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r16, 0xc06864ce, &(0x7f00000000c0)={r18}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r16, 0xc06864ce, &(0x7f00000000c0)={r18, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r16, 0xc008640a, &(0x7f0000000040)={r19}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000340)={r10, 0x7, 0x1, 0x910, 0x1, [r11, r7, r15, r19], [0x4, 0x2, 0x1c, 0x4], [0x2, 0x7ff, 0x6, 0x2], [0x3, 0x9, 0x7f, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r20, 0x40086203, 0x0) [ 1965.939980][ T5184] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1965.998954][ T5184] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1966.026551][ T5184] EXT4-fs (loop2): get root inode failed [ 1966.032633][ T5184] EXT4-fs (loop2): mount failed 20:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x0, r3, 0x2, 0x1904, 0x4, 0x4, 0x2, 0x4729, 0x1f, 0x4, 0x1dbe}) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200)={0x202400, 0x58, 0x26}, 0x18) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10}) (async) r11 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r11, 0xc01864b1, &(0x7f0000000240)={r13, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000240)={r8, r10, r13, 0x3, 0x8, 0x5d7, 0x5, 0x7ff, 0x6, 0x2, 0x0, 0x7fffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r5}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000840)={0x1f, 0xffff, 0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x5, 0x8, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x600, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000700)={&(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[{}], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x1, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000500)=[r3, r4, r1], &(0x7f0000000540)=[0x9, 0x9, 0x3, 0x1f, 0x6, 0x0, 0xf18, 0x4, 0x2], &(0x7f0000000780)=[r8, 0x0, 0x0, r8, r9], &(0x7f00000007c0)=[0x6], 0x0, 0x4}) r10 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r10, 0xc03064b7, &(0x7f0000000080)={r12, 0x0, r13, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={r13, 0x64, &(0x7f0000000040)=""/100}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:47:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x3f00, 0x7fff) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) syz_open_dev$dri(0xfffffffffffffffd, 0x1, 0x10400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1, 0x101, 0x101}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x8, 0x400006, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000180)={r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0x40086203, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x8, 0x8, 0x2}) 20:47:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000840)={0x1f, 0xffff, 0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x5, 0x8, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x600, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000700)={&(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[{}], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x1, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000500)=[r3, r4, r1], &(0x7f0000000540)=[0x9, 0x9, 0x3, 0x1f, 0x6, 0x0, 0xf18, 0x4, 0x2], &(0x7f0000000780)=[r8, 0x0, 0x0, r8, r9], &(0x7f00000007c0)=[0x6], 0x0, 0x4}) r10 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r10, 0xc03064b7, &(0x7f0000000080)={r12, 0x0, r13, 0x0, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={r13, 0x64, &(0x7f0000000040)=""/100}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1966.256587][ T5206] loop2: detected capacity change from 0 to 128 20:47:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000840)={0x1f, 0xffff, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x5, 0x8, 0x6}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x600, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000700)={&(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[{}], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x1, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000500)=[r3, r4, r1], &(0x7f0000000540)=[0x9, 0x9, 0x3, 0x1f, 0x6, 0x0, 0xf18, 0x4, 0x2], &(0x7f0000000780)=[r8, 0x0, 0x0, r8, r9], &(0x7f00000007c0)=[0x6], 0x0, 0x4}) r10 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) (async) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r10, 0xc03064b7, &(0x7f0000000080)={r12, 0x0, r13, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={r13, 0x64, &(0x7f0000000040)=""/100}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x0, r3, 0x2, 0x1904, 0x4, 0x4, 0x2, 0x4729, 0x1f, 0x4, 0x1dbe}) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) (async, rerun: 32) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200)={0x202400, 0x58, 0x26}, 0x18) (async, rerun: 32) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r10}) (async) r11 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r11, 0xc01864b1, &(0x7f0000000240)={r13, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000240)={r8, r10, r13, 0x3, 0x8, 0x5d7, 0x5, 0x7ff, 0x6, 0x2, 0x0, 0x7fffffff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r5}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1966.331066][ T5206] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1966.369566][ T5206] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r1, r1, &(0x7f0000000040)=0x3f00, 0x7fff) (async) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) syz_open_dev$dri(0xfffffffffffffffd, 0x1, 0x10400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1, 0x101, 0x101}) (async, rerun: 32) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async, rerun: 32) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async, rerun: 64) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x8, 0x400006, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r9}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000180)={r9}) (rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0x40086203, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x8, 0x8, 0x2}) 20:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1966.408128][ T5206] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file1\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x57, 0xffffffffffffffff, 0x80000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="be0b9d1db04f5b83e747613dc350d8093a050dabf4ef4b2a4f726a7a1e51c2d83f266e74df81f89cafb6f7d07c117b0b97a6229afd4af834a7", &(0x7f00000000c0)=@udp6=r5, 0x4}, 0x20) process_mrelease(r5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38}) pidfd_send_signal(r5, 0x9, &(0x7f0000000240)={0x1, 0x5, 0x6}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000016c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000001700)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000001a00)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000340)=[0x0, r6, 0x0], &(0x7f0000000380)=[0x7fffffff], 0x3}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0xfffffffd], [0x0, 0x8], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) r12 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x6, 0x3ff, 0xb97a}) pwritev2(r12, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r12, r12, &(0x7f0000000500)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000280)={r3, 0x4, 0x1, 0x2b4, 0x6, [], [0x80, 0x800, 0x6, 0xfffffffa], [0xfff, 0x3, 0x6, 0x9], [0x3, 0x3, 0x2, 0x1]}) [ 1966.495749][ T5206] EXT4-fs (loop2): get root inode failed [ 1966.501436][ T5206] EXT4-fs (loop2): mount failed 20:47:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r1, r1, &(0x7f0000000040)=0x3f00, 0x7fff) (async) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) syz_open_dev$dri(0xfffffffffffffffd, 0x1, 0x10400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1, 0x101, 0x101}) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x8, 0x400006, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000180)={r9}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0x40086203, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x8, 0x8, 0x2}) 20:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={r2, r3, r6, 0xfff, 0x7fffffff, 0x3f, 0x0, 0x1ff, 0x8, 0x3, 0xffff8000, 0x7}) 20:47:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3U1oHHUYB+B3ZneNSVYJehHEj4uILgS9iV7iRSEgIYgIKkREvSiJEBO8JYLgxYO9t+TUSyi9Ne2x5JJbS6GntM0hvRTaUmhDD+1hy+zslnSzpWk3u9tmngeW+WBm3neY+f0nhwwTQGGNRcRERJQiohYRlYhIdm/wbv4bay6uDG/MRNTrX99KGtvly7nWfqMRsRwRn0TEeprEb+WIxbXvt+9ufvn+fwuV946vfTfc15Nsurm99dXOsal/T01+vHj+4vWpJCai+sh5Hbykw7pyEvFaL4o9J5LyoDtgP6b/Onkpy/3rzfu0FpVII794/8+/tF6JD48+bt8jNy682c9egYNXr1eyZ+ByHSicNCKqkaTjEZHPp+n4eP43/OXSSPr73PyftV/nFmZ/HvRIBRyUasTWF2eGTo+25f9aKc8/cHhl+f9mevVKNr9T2scO/7zS+6aA3norn2T5r/249EHsN//AoSH/UFzyD8Ul/1Bcz5L/Xzr9MxvwwvH8h+KSfygu+Yfikn8oLvmH4tqdfwCgWOpDg34DGRiUQY8/AAAAAAAAAAAAAAAAAADAHuWImFkZ3mj8shUv97zkp7cfvoFcjmjVbtWPKDW+R9zqZORO0miyJWk23Y0f3unyAF060e+3r9vO99Wrfa7f5tzbg62/NBux/HdEfFQu773/kub914UnfC+j8lO3BZ5Oezuffdvf+u3urw62/uRmxNnPs+vfafxJ443GtPP4U82uX5f1/7jX5QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADomwcBAAD//8DMcVw=") 20:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={r2, r3, r6, 0xfff, 0x7fffffff, 0x3f, 0x0, 0x1ff, 0x8, 0x3, 0xffff8000, 0x7}) 20:47:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file1\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x57, 0xffffffffffffffff, 0x80000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="be0b9d1db04f5b83e747613dc350d8093a050dabf4ef4b2a4f726a7a1e51c2d83f266e74df81f89cafb6f7d07c117b0b97a6229afd4af834a7", &(0x7f00000000c0)=@udp6=r5, 0x4}, 0x20) process_mrelease(r5, 0x0) (async) process_mrelease(r5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38}) pidfd_send_signal(r5, 0x9, &(0x7f0000000240)={0x1, 0x5, 0x6}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000016c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000016c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000001700)={r6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000001700)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000001a00)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000340)=[0x0, r6, 0x0], &(0x7f0000000380)=[0x7fffffff], 0x3}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfffffffd], [0x0, 0x8], [0x0, 0x0, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0xfffffffd], [0x0, 0x8], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) r12 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x6, 0x3ff, 0xb97a}) pwritev2(r12, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r12, r12, &(0x7f0000000500)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000280)={r3, 0x4, 0x1, 0x2b4, 0x6, [], [0x80, 0x800, 0x6, 0xfffffffa], [0xfff, 0x3, 0x6, 0x9], [0x3, 0x3, 0x2, 0x1]}) 20:47:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1966.784665][ T5247] loop2: detected capacity change from 0 to 128 [ 1966.851289][ T5247] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={r2, r3, r6, 0xfff, 0x7fffffff, 0x3f, 0x0, 0x1ff, 0x8, 0x3, 0xffff8000, 0x7}) 20:47:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file1\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x57, 0xffffffffffffffff, 0x80000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="be0b9d1db04f5b83e747613dc350d8093a050dabf4ef4b2a4f726a7a1e51c2d83f266e74df81f89cafb6f7d07c117b0b97a6229afd4af834a7", &(0x7f00000000c0)=@udp6=r5, 0x4}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="be0b9d1db04f5b83e747613dc350d8093a050dabf4ef4b2a4f726a7a1e51c2d83f266e74df81f89cafb6f7d07c117b0b97a6229afd4af834a7", &(0x7f00000000c0)=@udp6=r5, 0x4}, 0x20) process_mrelease(r5, 0x0) (async) process_mrelease(r5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38}) pidfd_send_signal(r5, 0x9, &(0x7f0000000240)={0x1, 0x5, 0x6}, 0x0) (async) pidfd_send_signal(r5, 0x9, &(0x7f0000000240)={0x1, 0x5, 0x6}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000016c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000001700)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000001a00)={r6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000001a00)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000340)=[0x0, r6, 0x0], &(0x7f0000000380)=[0x7fffffff], 0x3}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0xfffffffd], [0x0, 0x8], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r10}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (async) r12 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x6, 0x3ff, 0xb97a}) pwritev2(r12, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) pwritev2(r12, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r12, r12, &(0x7f0000000500)=0x3f00, 0x7fff) (async) sendfile(r12, r12, &(0x7f0000000500)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000280)={r3, 0x4, 0x1, 0x2b4, 0x6, [], [0x80, 0x800, 0x6, 0xfffffffa], [0xfff, 0x3, 0x6, 0x9], [0x3, 0x3, 0x2, 0x1]}) 20:47:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1966.965700][ T5247] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:05 executing program 4: quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r2, 0x21) fstatfs(r2, &(0x7f0000000200)=""/73) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x22, 0x3d7c0000, 0x1}) memfd_create(&(0x7f0000000280)='\x00', 0x3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x81, 0x2}) [ 1967.028671][ T5247] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1967.073407][ T5247] EXT4-fs (loop2): get root inode failed [ 1967.080785][ T5247] EXT4-fs (loop2): mount failed 20:47:05 executing program 4: quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r2 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r2, 0x21) (async) fstatfs(r2, &(0x7f0000000200)=""/73) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x22, 0x3d7c0000, 0x1}) (async) memfd_create(&(0x7f0000000280)='\x00', 0x3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x81, 0x2}) 20:47:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x7, 0xa, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) 20:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:05 executing program 4: quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r2, 0x21) (async) fchmod(r2, 0x21) fstatfs(r2, &(0x7f0000000200)=""/73) (async) fstatfs(r2, &(0x7f0000000200)=""/73) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x22, 0x3d7c0000, 0x1}) memfd_create(&(0x7f0000000280)='\x00', 0x3) (async) memfd_create(&(0x7f0000000280)='\x00', 0x3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x81, 0x2}) 20:47:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x7, 0xa, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x7, 0xa, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) (async) [ 1967.289774][ T5288] loop2: detected capacity change from 0 to 128 20:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1967.341364][ T5288] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1967.406325][ T5288] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x7, 0xa, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r8}) [ 1967.456313][ T5288] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1967.490420][ T5288] EXT4-fs (loop2): get root inode failed [ 1967.501712][ T5288] EXT4-fs (loop2): mount failed [ 1967.557047][T15014] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 20:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1967.735396][ T5311] loop2: detected capacity change from 0 to 128 20:47:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1967.826874][ T5311] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1967.860648][ T5311] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1967.894059][ T5311] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1967.923499][ T5311] EXT4-fs (loop2): get root inode failed [ 1967.938421][ T5311] EXT4-fs (loop2): mount failed 20:47:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) 20:47:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) 20:47:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) 20:47:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) [ 1968.238022][ T5328] loop2: detected capacity change from 0 to 128 [ 1968.299312][ T5328] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) [ 1968.355724][ T5328] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1968.401472][ T5328] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1968.427791][ T5328] EXT4-fs (loop2): get root inode failed [ 1968.434155][ T5328] EXT4-fs (loop2): mount failed 20:47:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) 20:47:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={0x0, r2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000240)={r8, 0x8001, 0xfffffffd, 0x1, 0x0, [0x0, r12, r13], [0x9, 0x0, 0x9, 0x94], [0x9, 0x0, 0x7fff, 0x1], [0xffffffffffffffff, 0x5, 0x8, 0x4]}) 20:47:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x5, 0x9, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000740)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYBLOB="00000000000000002e8919c22f0a44f4dfad51ef9ab9ec70247795749de0dfb8f1d1edab3346cc3e894faa83448f57c5a4d0f1a481585b622d3194593b46901a9fa73bbd25f5be7c28cc28960e9bd75b9c06c652b6df01f3d422d22edd207c5fb908a75be868a4abe03b22873394be3c9876a4509234ce6909441403c1b9b4c45f2b29b618f804c883f3532d16c9ec"]) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x100}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000280)={r3, 0x3ff, 0x3, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0], [0xee6, 0xfffffff9, 0x8, 0x8], [0x3, 0x3, 0x7, 0x80004000], [0x8, 0x80, 0x100000000, 0x401]}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f00000006c0)={r10}) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f00000000c0)={r13, 0x0, 0x0, 0x0, 0x2, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r11, 0xc008640a, &(0x7f0000000040)={r14, 0x0}) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r16, 0xc010640b, &(0x7f0000000340)={r15}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000180)={r15, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000340)={r9, 0x1000, 0x200, 0x87, 0x3, [r10, r17, r18, r4], [0x0, 0x80000001, 0x101, 0x80000001], [0x10000, 0x1000000, 0x7e, 0x3f], [0x2, 0x0, 0x8, 0x7f]}) r19 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r19, 0xc00464af, &(0x7f0000000840)=r3) 20:47:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) [ 1968.674610][ T5350] loop2: detected capacity change from 0 to 128 20:47:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) r6 = syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={0x0, r2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000240)={r8, 0x8001, 0xfffffffd, 0x1, 0x0, [0x0, r12, r13], [0x9, 0x0, 0x9, 0x94], [0x9, 0x0, 0x7fff, 0x1], [0xffffffffffffffff, 0x5, 0x8, 0x4]}) 20:47:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x5, 0x9, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000740)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYBLOB="00000000000000002e8919c22f0a44f4dfad51ef9ab9ec70247795749de0dfb8f1d1edab3346cc3e894faa83448f57c5a4d0f1a481585b622d3194593b46901a9fa73bbd25f5be7c28cc28960e9bd75b9c06c652b6df01f3d422d22edd207c5fb908a75be868a4abe03b22873394be3c9876a4509234ce6909441403c1b9b4c45f2b29b618f804c883f3532d16c9ec"]) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x100}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r2, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000280)={r3, 0x3ff, 0x3, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0], [0xee6, 0xfffffff9, 0x8, 0x8], [0x3, 0x3, 0x7, 0x80004000], [0x8, 0x80, 0x100000000, 0x401]}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f00000006c0)={r10}) (async) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f00000000c0)={r13, 0x0, 0x0, 0x0, 0x2, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r11, 0xc008640a, &(0x7f0000000040)={r14, 0x0}) (async) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r16, 0xc010640b, &(0x7f0000000340)={r15}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000180)={r15, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000340)={r9, 0x1000, 0x200, 0x87, 0x3, [r10, r17, r18, r4], [0x0, 0x80000001, 0x101, 0x80000001], [0x10000, 0x1000000, 0x7e, 0x3f], [0x2, 0x0, 0x8, 0x7f]}) (async) r19 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r19, 0xc00464af, &(0x7f0000000840)=r3) 20:47:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) [ 1968.718498][ T5350] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1968.751587][ T5350] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1968.794821][ T5350] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1968.824982][ T5350] EXT4-fs (loop2): get root inode failed [ 1968.833144][ T5350] EXT4-fs (loop2): mount failed 20:47:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x5, 0x9, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000740)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYBLOB="00000000000000002e8919c22f0a44f4dfad51ef9ab9ec70247795749de0dfb8f1d1edab3346cc3e894faa83448f57c5a4d0f1a481585b622d3194593b46901a9fa73bbd25f5be7c28cc28960e9bd75b9c06c652b6df01f3d422d22edd207c5fb908a75be868a4abe03b22873394be3c9876a4509234ce6909441403c1b9b4c45f2b29b618f804c883f3532d16c9ec"]) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x100}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r2, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000280)={r3, 0x3ff, 0x3, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0], [0xee6, 0xfffffff9, 0x8, 0x8], [0x3, 0x3, 0x7, 0x80004000], [0x8, 0x80, 0x100000000, 0x401]}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f00000006c0)={r10}) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f00000000c0)={r13, 0x0, 0x0, 0x0, 0x2, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r11, 0xc008640a, &(0x7f0000000040)={r14, 0x0}) (async) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r16, 0xc010640b, &(0x7f0000000340)={r15}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000180)={r15, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000340)={r9, 0x1000, 0x200, 0x87, 0x3, [r10, r17, r18, r4], [0x0, 0x80000001, 0x101, 0x80000001], [0x10000, 0x1000000, 0x7e, 0x3f], [0x2, 0x0, 0x8, 0x7f]}) (async) r19 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r19, 0xc00464af, &(0x7f0000000840)=r3) 20:47:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async, rerun: 64) r6 = syz_open_dev$dri(0x0, 0x60f, 0x0) (rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) (async) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={0x0, r2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000240)={r8, 0x8001, 0xfffffffd, 0x1, 0x0, [0x0, r12, r13], [0x9, 0x0, 0x9, 0x94], [0x9, 0x0, 0x7fff, 0x1], [0xffffffffffffffff, 0x5, 0x8, 0x4]}) 20:47:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xcc}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) 20:47:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x6, 0x1, 0x7}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/rcu_expedited', 0x50f141, 0x22) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x200c1, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000480), 0xffff, 0x20081) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, r3) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000380)={r7, 0x1, 0x1, 0x22, 0x1, [], [0x9, 0x0, 0x3f, 0x80000000], [0x8, 0x9, 0x675aa154, 0x5], [0x6, 0x2ce7, 0x9]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000180)={r1, 0xffffffff, 0x6, 0x80, 0x3, [], [0x1000, 0x5, 0xff, 0x101], [0x100, 0xffffffff, 0x800, 0x6], [0xfffffffffffffffd, 0x3, 0x4, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200)={r12}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r8, 0x0, 0x0}) 20:47:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) 20:47:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c000000210004002cbd7000fddbdf250a8080008100000101000180140002000000cdf900000000000000000000000114000200fe8000000000000000000000000000aa14000200fe80000000000000000000000000003f08000d00ff7f000014000100fc01000000000000000000000000000114000100018000000000000000000000000000bb1400020000000000000000000b000000000000002630ea6a4ff9d4321fec01e0c89d4e"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:47:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001300), 0x414040, 0x26) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000001380)={&(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) r7 = accept4$x25(r6, &(0x7f0000000200), &(0x7f0000000240)=0x12, 0x800) r8 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000280), 0x88500, 0x4) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000300)={{r8}, "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"}) syz_open_dev$dri(0x0, 0x60f, 0x0) r9 = memfd_secret(0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000001500)={&(0x7f0000001400)=[0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0), 0x2, 0x6, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:07 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x6, 0x1, 0x7}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/rcu_expedited', 0x50f141, 0x22) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/rcu_expedited', 0x50f141, 0x22) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x200c1, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x200c1, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000480), 0xffff, 0x20081) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, r3) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, r3) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000380)={r7, 0x1, 0x1, 0x22, 0x1, [], [0x9, 0x0, 0x3f, 0x80000000], [0x8, 0x9, 0x675aa154, 0x5], [0x6, 0x2ce7, 0x9]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000380)={r7, 0x1, 0x1, 0x22, 0x1, [], [0x9, 0x0, 0x3f, 0x80000000], [0x8, 0x9, 0x675aa154, 0x5], [0x6, 0x2ce7, 0x9]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000180)={r1, 0xffffffff, 0x6, 0x80, 0x3, [], [0x1000, 0x5, 0xff, 0x101], [0x100, 0xffffffff, 0x800, 0x6], [0xfffffffffffffffd, 0x3, 0x4, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200)={r12}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r8, 0x0, 0x0}) [ 1969.068528][ T5382] loop2: detected capacity change from 0 to 128 20:47:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 20:47:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) [ 1969.141696][ T5382] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c000000210004002cbd7000fddbdf250a8080008100000101000180140002000000cdf900000000000000000000000114000200fe8000000000000000000000000000aa14000200fe80000000000000000000000000003f08000d00ff7f000014000100fc01000000000000000000000000000114000100018000000000000000000000000000bb1400020000000000000000000b000000000000002630ea6a4ff9d4321fec01e0c89d4e"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:47:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001300), 0x414040, 0x26) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000001380)={&(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) r7 = accept4$x25(r6, &(0x7f0000000200), &(0x7f0000000240)=0x12, 0x800) r8 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000280), 0x88500, 0x4) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000300)={{r8}, "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"}) syz_open_dev$dri(0x0, 0x60f, 0x0) r9 = memfd_secret(0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000001500)={&(0x7f0000001400)=[0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0), 0x2, 0x6, 0x7}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1969.224645][ T5382] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x6, 0x1, 0x7}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/rcu_expedited', 0x50f141, 0x22) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x200c1, 0x0) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000480), 0xffff, 0x20081) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, r3) (async) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000380)={r7, 0x1, 0x1, 0x22, 0x1, [], [0x9, 0x0, 0x3f, 0x80000000], [0x8, 0x9, 0x675aa154, 0x5], [0x6, 0x2ce7, 0x9]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000180)={r1, 0xffffffff, 0x6, 0x80, 0x3, [], [0x1000, 0x5, 0xff, 0x101], [0x100, 0xffffffff, 0x800, 0x6], [0xfffffffffffffffd, 0x3, 0x4, 0x4]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) (async) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={r12}) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200)={r12}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r8, 0x0, 0x0}) 20:47:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) [ 1969.305849][ T5382] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1969.337788][ T5382] EXT4-fs (loop2): get root inode failed [ 1969.344984][ T5382] EXT4-fs (loop2): mount failed 20:47:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) 20:47:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001300), 0x414040, 0x26) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000001380)={&(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) r7 = accept4$x25(r6, &(0x7f0000000200), &(0x7f0000000240)=0x12, 0x800) (async) r8 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000280), 0x88500, 0x4) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000300)={{r8}, "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"}) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) r9 = memfd_secret(0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000001500)={&(0x7f0000001400)=[0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0), 0x2, 0x6, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 20:47:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c000000210004002cbd7000fddbdf250a8080008100000101000180140002000000cdf900000000000000000000000114000200fe8000000000000000000000000000aa14000200fe80000000000000000000000000003f08000d00ff7f000014000100fc01000000000000000000000000000114000100018000000000000000000000000000bb1400020000000000000000000b000000000000002630ea6a4ff9d4321fec01e0c89d4e"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:47:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1100) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000440)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={r3, 0x1f, &(0x7f00000000c0)=""/31}) 20:47:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000200)) 20:47:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4000, 0x158) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0xffffff9a}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8001, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r6}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1969.519789][ T5422] loop2: detected capacity change from 0 to 128 [ 1969.557461][ T5422] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1100) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000440)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={r3, 0x1f, &(0x7f00000000c0)=""/31}) [ 1969.591379][ T5422] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x8001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xaec], [0x10000000000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) [ 1969.642957][ T5422] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4000, 0x158) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0xffffff9a}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8001, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r6}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1969.713223][ T5422] EXT4-fs (loop2): get root inode failed [ 1969.718989][ T5422] EXT4-fs (loop2): mount failed 20:47:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3U1oHGUYB/BnZneNSVaJehHEj4uILgS9iV7iRSEgIYgIKkREvSiJEBO8JYLQSw/tvSWnXkLprWmPJZfcWgo9pW0O6aXQlkIbemgPW3Znt6SbLU2y2d028/vBMB+ZmeedzPzf2cO+bAC5NRIRYxFRiIhKRJQiItm+wwfZNNJYXRpcm4qoVr+7m9T3y9YzzeOGI2IxIj6PiNU0iT+LEfMrP20+WP/mo6NzpQ9Prfw42NOLbLizufHt1smJI2fHP5u/dOXWRBJjUX7qug5e0mZbMYl4sxvFXhBJsd8tYDcm/z1ztZb7txrPaSVKkUZ2847NvrJaik9OPOvY47cvv9PLtgIHr1ot1d6Bi1Ugd9KIKEeSjkZEtpymo6PZZ/hrhaH0r5nZfyp/zMxN/9bvngo4KOWIja/PD5wbbsn/zUKWf+DwquX/+8nl67XlrcIuDvj/te43Cuiud7NZLf+VXxY+jt3mHzg05B/yS/4hv+Qf8ms/+f+93ZfZgJeO9z/kl/xDfsk/5Jf8Q37JP+TX9vwDAPlSHej3CGSgX/rd/wAAAAAAAAAAAAAAAAAAADsUI2JqaXCtPtU2vNr1kl/cezICuRjRrN2sH1Go/x5xsyVD95N6I5uSRqM78fP7HZ6gQ6d7Pfq65Xpfv9Hj+i0uvtff+gvTEYv/RcSnxeLO5y9pPH/798Zz/l76tcMCe1RqWf/yh97Wb/Voub/1x9cjLnxVu//t+p803q7P2/c/5Tb/z736+2GHJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBnHgcAAP//i+RxcA==") 20:47:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x8001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xaec], [0x10000000000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:47:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) 20:47:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1100) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000440)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={r3, 0x1f, &(0x7f00000000c0)=""/31}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1100) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000440)="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", 0x1000}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={r3, 0x1f, &(0x7f00000000c0)=""/31}) (async) 20:47:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4000, 0x158) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0xffffff9a}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8001, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r6}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 20:47:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) 20:47:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x8001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xaec], [0x10000000000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:47:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={0x0, 0x800, 0x80000001, 0x7, 0x3, [0x0, 0x0], [0x7, 0x80000001, 0x2, 0x6], [0x1000, 0x0, 0x79b, 0x100], [0x5, 0x40, 0x2c9, 0x8]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r3, 0x80000}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r5}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) [ 1969.926106][ T5459] loop2: detected capacity change from 0 to 128 [ 1969.970862][ T5459] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1969.996897][ T5459] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) [ 1970.040145][ T5459] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) [ 1970.085593][ T5459] EXT4-fs (loop2): get root inode failed [ 1970.142409][ T5459] EXT4-fs (loop2): mount failed 20:47:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3U1oHGUYB/BnZneNSVaJehHEj4uILgS9iV7iRSEgIYgIKkREvSiJEBO8JYLgxYPelZx6CaW3pj2WXHJrKfSUtjmkl0JbCm3ooT1smZ3dkm62NM1md9vM7wfDfOzMPO8w839nD/uyARTWWERMREQpImoRUYmIZPcOb+XTWHN1ZXhjJqJe/+Jm0tgvX8+1jhuNiOWI+DAi1tMkfi5HLK59s31n87N3/l6ovH1s7evhvl5k043trc93/p/66+TkB4vnLlybSmIiqg9d1+FLOmwrJxEv96LYUyIpD7oF7Mf07ycuZrl/pfmc1qISaeQ375/559Yr8d5/jzr23+vnX+tnW4HDV69Xsnfgch0onDQiqpGk4xGRL6fp+Hj+Hf5SaST9ZW7+t9pPcwuzPwy6pwIOSzVi69PTQ6dG2/J/tZTnHzi6svx/Ob16OVveKe3jgD9f6H2jgN56PZ9l+a99t/Ru7Df/wJEh/1Bc8g/FJf9QXAfJ/4+dfswGPHO8/6G45B+KS/6huOQfikv+obh25x8AKJb60KBHIAODMuj+BwAAAAAAAAAAAAAAAAAA2KMcETMrwxuNKdvwfM9LfnTrwQjkckSrdqt+RKnxf8StlozcThqNbEmaje7Gt292eYIuHe/36Ou2633xSp/rtzn7xmDrL81GLP8REe+Xy3ufv6T5/B3cS4/5vPJ9lwWe0FDb+sdf9bd+u3urg60/uRlx5pPs/nfqf9J4tTHv3P9Us/vXZf1f73Z5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrmfgAAAP//bBtxcg==") 20:47:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={0x0, 0x800, 0x80000001, 0x7, 0x3, [0x0, 0x0], [0x7, 0x80000001, 0x2, 0x6], [0x1000, 0x0, 0x79b, 0x100], [0x5, 0x40, 0x2c9, 0x8]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r3, 0x80000}) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r5}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000200)) 20:47:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:47:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000200)) 20:47:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) [ 1970.319378][ T5485] loop2: detected capacity change from 0 to 128 20:47:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={0x0, 0x800, 0x80000001, 0x7, 0x3, [0x0, 0x0], [0x7, 0x80000001, 0x2, 0x6], [0x1000, 0x0, 0x79b, 0x100], [0x5, 0x40, 0x2c9, 0x8]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r3, 0x80000}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r5}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 1970.368745][ T5485] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1970.400726][ T5485] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000200)) 20:47:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) syz_io_uring_complete(0x0) r3 = dup3(r0, r1, 0x80000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000180)=0x30) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) 20:47:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1970.429256][ T5485] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1970.494209][ T5485] EXT4-fs (loop2): get root inode failed [ 1970.521884][ T5485] EXT4-fs (loop2): mount failed 20:47:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000200)={0x0, 0x80000001, 0x0, 0x93d, 0x1, [], [0x871, 0x3, 0xffff, 0x80000001], [0x8, 0x9, 0x75, 0x4], [0x7, 0x7, 0x9, 0x1ff]}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) 20:47:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) syz_io_uring_complete(0x0) r3 = dup3(r0, r1, 0x80000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000180)=0x30) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) syz_io_uring_complete(0x0) (async) dup3(r0, r1, 0x80000) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000180)=0x30) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [], [], [0x1]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) (async) 20:47:08 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) 20:47:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x60f, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000200)={0x0, 0x80000001, 0x0, 0x93d, 0x1, [], [0x871, 0x3, 0xffff, 0x80000001], [0x8, 0x9, 0x75, 0x4], [0x7, 0x7, 0x9, 0x1ff]}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) syz_io_uring_complete(0x0) (async) r3 = dup3(r0, r1, 0x80000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000180)=0x30) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) [ 1970.740114][ T5521] loop2: detected capacity change from 0 to 128 20:47:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:08 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) [ 1970.789048][ T5521] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1970.814050][ T5521] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xd9, 0xfc3}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x6, 0x2}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r2}) [ 1970.873981][ T5521] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1970.908387][ T5521] EXT4-fs (loop2): get root inode failed [ 1970.914152][ T5521] EXT4-fs (loop2): mount failed 20:47:09 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) 20:47:09 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x6, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x60f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000200)={0x0, 0x80000001, 0x0, 0x93d, 0x1, [], [0x871, 0x3, 0xffff, 0x80000001], [0x8, 0x9, 0x75, 0x4], [0x7, 0x7, 0x9, 0x1ff]}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 20:47:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10802, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000080)={r5, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={r6, 0x8f, &(0x7f00000000c0)=""/143}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) 20:47:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:09 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000200)) 20:47:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xd9, 0xfc3}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x6, 0x2}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r2}) 20:47:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10802, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000080)={r5, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={r6, 0x8f, &(0x7f00000000c0)=""/143}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10802, 0x0) (async) syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000080)={r5, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={r6, 0x8f, &(0x7f00000000c0)=""/143}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) (async) 20:47:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r4}) 20:47:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1971.114254][ T5554] loop2: detected capacity change from 0 to 128 20:47:09 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000200)) 20:47:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "88414f4ccaa74332c57db1f88abe094c372544c7311971d5d3686b538fe66e6628566d179abc6e0e83c1c856a46bd9054d636052d9e559b5887488a9036390999c95db84b5785f7b76049d06959af4de3dd8c114c89086f6853b8abdc0f75b465f92c7ae528674bf50f241879fa72224ab71aaae8b332394f5e3ee30af35bd9e61f812d58a7000dde1a25f06c08ebdb05bbdfceefccf70129075cd7b929d88ef7645c100de9814b877fd4dff0dce958c55f8fcf91c5be7981243586b242b10014faeadfa9eb0174192ea9713007cc046a5412297137db9a9e84971a6b7ef9519fbf30fb8e310399909f01583b86eea904dcc669db4c188ba8de7d642f21244a6", "226f44d58f43a146f046bae6751e03d88b67050cb3265c9d88c23dbb4b3f151d016a0ceaa8806be71f275863448bf867cb930ec246439fc472a2160702b0c68569916fa09a6e368a9dd8a0c6f45c2bd1b2c44d3327522c0645313f2be35e73a301a479fb9dfdf6bdae9896395480ffedd85f08f41835192930aa0d87dc563ad3c78145d10c7dff932ac7efc253065861ca0287596571e363246be133bdead83b633af28757bcbe8e5e7d81d6ea9613c95204ed001514e595ce5c90ec01c08be512d91ef18f187edb62b276a4178483035547061445c8134e7e513e58ff108b6f61a5efe108e70892b39312ca99e814bb2e2906c0386a5fb2e6c1d53788eb9b15be3cdf45b7133d5eab3f51b0aa438e3dfdd40ddc4b2f4431f3acf2bfbd432d6f3b502b32d6e511170bb0d384f3bbe3ebc8e778b306493ad6fe36d7cc2ba256ba7d244bb8160a48b21feeda23ef76fb3693c742be1a6aa154f0e65ca44f36ab779c5a0780f9a4032491033a8b6209a23bd51b164ecf0568494c9407fc61aaed168895ce1678d9fe70ce9c8313d53fb78cacacdbfa598106a9978e57895fe8e2dc16426202cf6a0feaf9bf5fc07196aced03f3c1e90c92477c4e56d8c7357d5ec11bd978ad5107556d34767eb597736a3a7045fcb3e67307ae8a977014051097588dc548e3f5e7281a0e0d0feeb3bd0c7a6c301601727db58425511c0241dfa9149ac73dbf3836b85ec0b456618d81e8943219247758fa6ba882d65053ff59f188dcaeeb4f6e35c757316f6c3865ff66c483b909d51a2056b8cffa45ec7fe7ca9ccfd92112bdf65fbd8f6d20681af708f46f3ead0646fde08ba53232808e4a8d1da5d79dd202bcb1919babccd2c3520f36dfa267baa655428be7cfbf85cb7826a4a5e205bfcf3aed8870a5f84b885a12b9a99658145a179d7013e4a386c49bc4201d1c4d76698f0ba48237554ce58aba94a063768955fc71541b38ea431ee539ad927cef5ee7034ff515e48f2d48356a362124ce90e36b31861841fe5a0cd14632bbb6160931e60632767a5ac31b5d71625b141eae55d84b4c85f041ccd98cf86fb45eb76dbe310c1401a627069955a9fb1888c753d41ecb86bb51a158211866fa6e510bb490d6d6ce5bf87a67d8825c46d0e2c23018828345a970c86c48f06fc76a739a11bd23b30a4ce2c5ded494a2f9c6d59a5a7d1ca9457e64a4a954b50dc7314e846419835b8ccaf7e2ddc31c878af1b3b4e80246eda43d8d6b8a15f1c24b860bd43d9fb86c4d3bba53b340af63ef8c1e960b090911ebbe487223eede158fddf44f6e1ea3cabd5eed0893fdbfd157e860da68e00ae4fb8bdedca482910156efa7e36f2e5820035855c44c4cc1200ec8a9cbbe634f4c9c8a1ce1f0d8364bf3cbf03b466ae1dcff229b55d39ac35ef3df97b06f8a388f9dc1cd03b9abfd3a87a4bd17ee1864c3450be5b0b2638579fb637548c4ff05ad5a6ada6e5d83f817c5d59135195a2a8bfffd3a0638cb8c52d6406a05f22798856066cb0d80776fdbe90b18c6b718409c9153b85e7b29556adbf781750c8f72a7d95c68e407be7ea83cc00395d290357b69fad5c5312a3c4a3fe155c6dc5f852cde621a4ae236b5a56438dd02231ec99e1f14aac6d08a7bb6450490e0ef5ef6703c4881a7d39a0b4b32c9ad30530169c7a059deb08c1bf6d284ce8bfb966cff2e70ef916d96dd8add772f8632dd25929c7fa758b09ff692c8e1f856628ac470e407d218db90c47365c6f1ce699af951d8bd418268694aebeff48a2405955e0851efe4c622196f5fe47b0f2c0e1aff95dd11d5161ae9436592daea1a476cea8ab9de7ef628ce989c330c7852d32fc74ffac33ff907b792ee2e38e9a42218848cb0a340fb94120a12be0e8d567336d82dcafbdac08e28dde9d137fe29c71c90648d22829485380721c51e3aafee333e9b87a97f846e7e5c6779c1c4885769f05bbb37ba9c2de74a9037b890ec0956b3355387d7dd82226593fb7646fb0e1aa6a10f488fdc160fc0f94321b99fa19d121201bd1e0e5f7b673c0511086308ad6faaae4604fd88044228bd03d353ef1419c88bf967d26f31b36515cf2ae36f34241336d90c12e3c690b9dd4eeccd94014231be20c126cb1c3f2862f1e487d972a40a3c9606b3a656485f7acde8d992243929c5b0dded5a1fd941b6cddbea95ee24e39169f0b1ba9d7a45bb8182ce8975c50b8d12344242758fb8abfcb64411377f14eb84df21eadfeddde1fa2925ea8df9618cd33f96cf2fd568069da53dc6fe6f68cb8bc9de793926177076f41518df8154aa99073247e8be811d28948373ee38ebf6f183eee1f276742c4f53faa2b2937c5ab971c1d4f9739c67772395df31ef3896b953e45dfa92417d068f0db2265a43336201ee583f642bd53ba22eab3110baeb5d2502151efa1079c6159e3598e2eb14a91bca2fb2418c689e599a304f9945a7ee14b2b5a5e759c94dac2c078dfec2334b84d2e26e4247ffe2dfcdbcf2f8b36d06a169f965278b5b2c9f15dadbdc6caa9575b640c24d1ae44958e370ff236799b5414b8438aab7b8e6530ec8bb80c06338c2a151b12f4226b4d7e4584ee6a912602a0fd307e8f57f9cca1fdf0b8857d12d07488b35cbdcd26b1e2fbb49954b50709a61b03f8ebae316cab357c5934d7aa0a2e3c7bd9fb8f25b913c82026a3b33288f3001df85f18d967b68b23b3e33ae35eb8aa574e1a5ad16f37612273e44209bb406d3df0b32aaf4ce97ccb85fb9347179e10d3be363787b30562a438be865b5f787275f61294a10ea9161e9cc97636ae19481728673d13e4e6c0726f39e22cf4549b279427945f98b63f1e385edcd7ecc96d51a38e2cf1048ba46ad2e0d0bc3289ae1a3688568b881806bcf05f9708b1401e561a22d9c648fa7c24a868ab3af93fdbb82ea0b1eb89d47f889c7af610188b07d379ebf86e2cac242ecceb79a6f4ba567e26a0d9113816be69b80a4cad486f62c12304be66324a4928315c5eed8e1ae9ed39546a9bb45b153f4725bfb2e5ef48189804487bf015fa27ca925b66a525c8042025b3a75291bb1470df74d676bd2a5909831ee43da8d9f324f2ab88e57d66a9252c39fd63bde030c88ca175f328435a94812cf503294953c202a45fd4ff31b345354da6d914836ab9735816de83f6fe5e07f52de935e7f9ad5c389e659c387f7e6b2c32438f11e9ba34e5893901a422516a9f0688f6a94e01c1ba620632990675bb5e95e1efbe1a1f062700db180da46cf3dc00ae62db17b89f056968e2a20df711cf3b202c53fa5359a34cf79c3affd0e53aa7753cd9792cf6e9d75b33d566491670d330fd14f41af01031e422e14aa296aef70e03e5edf4eeeab6c3e805b549e8b778678fe7f6ef0c05a648e2170ebed7a8f029eb6b1775c0b113d79e22c2b41392bdacdc91b233d0c5d780ca30eb084280f115a826a98f1205878773ed98d8517ceb863b998288a2157bfd6e20b356e242fbe05f6279957d93bb1c1e2c3c3632c289a04895a29899acbe8e117b0bbed45af6ba9134ba0e6cb5d119de91ff5d76e15ce474699becd84f87471fe37689c93c9b69a4b185ddfc3ea0c9963fa4d58c19dbeff5b22f39a508c2002706574cbd3311ab4483f6d8a56186894d9e03c70194eab9b48167e13ed5b382b0f9da652435b421f0aeb3344586a79182b3cf276534c35da44b11c7f9ded690b89578f46607856ee567e7e4ebac42cb924d17c2f912270f14b0d63d8bf7ac06d23e2fe813bef062d3b4805f9a36fee624aa35bf60b322d4997407926bd0d99eef71acaebc71cf59c10b5e9dbd77ca91e738579bd163c917d401dea3dbbf5de6ea3510ad96c7bf25cf53daded79f9386e74b5a07b18df757059eb99f5520799a6436c4308eaeb29faa706044e3f051e446259b21627bad9875b5a59983432c9e3427ab826c5b2ef5be679e9e88512504adb908a2c3c6a04959e57a027f7221c90ce0c42602712cf539497431edf4edc131ea5b8c8a541c263eaf4d7a20bc300a703bec0bbc2f8e2091be2ec419cd4b4fbb2068359166894333ea58f829cecfa945a51539c67bcdba06e24cd3726be50939cf0b34530be9651cff86fe0bfc776ac936aa1b9ef9c099da3c797542f5508ea8d02531a74edf1cb6de17da02d73e9b11148b2aea08385fae12910e8c432c1d6455bab32f8fb2bc6ec5165ebdef6bfd7321eaee3ad861ccfdc206cd9e827335fcaf7ef9550f2f4f0dc632e6e48dd8859de60a31b0b1a7e2b21d047a50690817cd36ead7d33c4b9f315cb4310acb811c15312dddb2539145bf1f34c7af0adaa07bdd000cff47d15a9f30f030a3f45e9325611ffae5bfa6ffbbc38ae7963a8e4fe54926f6e88c21659aebd20deeac72ff3c4da92fe7811ead5af8adaa2001c60eac7f9952fd0903f29a3d9af703a1145b3331ba31722cd03df4b9b85526ca9855d8ea8a9143a25bb36c362be1ec447c1c1f911bc87764a73df903d82c5f9275b508ccfdaba089a3851b422da85b06780188734559775b60dfcb7a126d50aa78b15ee04be05fad65dcaacfda9add52e3e4a2ed4a20bab4ee982456ba020b00aafe3a9ae4d40061d7768dd40f82b53a8955641c8792a8557203038e15cd2dd373fd3fd3a57af4d3864156b9af704b2a07e78979e5a75992861caa9fea61b8d55d78547ccd0f317b6b75579db300770cf1b4e59c7aa6c4be7da0ae6a1fc7c0378b35ee8f78d188ed06bc9e6552d0181fc4f276a989a5a5ab2bcbe60b20c60e3080c914d76f0b9b85298453008220fd4c900a3647f1f5be1bfeb26a28cc135838a5c2143bd47df812762a137ebc37d74883a546ad008d1260a7950ce06809e6ca15be066b1d961c839ae5dd368df8e89f9cf5f0e4d8a9db3eaa45334a16477596463331f0b8d6bff09ea4ba24623c3c1053be56741a025c1d677ccee7a34d06c25c2db3be11ad2ca41a0b97ab54c5fe727b7424e4a683ddc0fbb1b2f759428815c93235995e2ed1876238d11b6828a45c7e8511bafe8f832d333453f7b82bc377377c4d342d05270c5ee4e1c0eea85114c2c0aa3f5af7d7a34869375e5b4192fa32ee546485cfa5f3fd7b66e140f455a8cd291be8b1298320dfc8c992efb3491027922961715cd1e13a5d189a4c3b818f5c960a32a5216f3cdad89387c8313bc7fd1be74644f14d9f668df35a697017a6cbdb232436ca3daf1221ed9e565262659878ee7da3e90933d64270eefe46a669b941fbaf8b05273b20e5de8ae0ae0abeae39659a47c5b2df214472de4129e899e17964ec222af3802e935e72899906d4763c98e1156db4b7d0d3a2ead98f9172de7bbecf768901d3d2131f6fc7b458743774412290571d814616f3d0afa448f02751a57ae2c58a42573"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="2ee4ff695c489a009e669d23e3e6b19e9875a0008facbcab04d7cd0e6c62c4c32cca31ebba6e271047376fa3d6abe60da71ba0ba6a1716b0"]) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000002c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x1, r9, r3, 0x100, 0x1ff, 0x5, 0x3, {0x4c41879, 0x7ff, 0x10e, 0xc39, 0x88f8, 0x0, 0x3, 0x708, 0x7, 0x0, 0xfff, 0xe84, 0x0, 0x5, "040f68015b6e97815d821d6c3335ed15e00296a7806b970a47517806833354a7"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r11}) [ 1971.158276][ T5554] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1971.197011][ T5554] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10802, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000080)={r5, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={r6, 0x8f, &(0x7f00000000c0)=""/143}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x10802, 0x0) (async) syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000080)={r5, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={r6, 0x8f, &(0x7f00000000c0)=""/143}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) (async) 20:47:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1971.238950][ T5554] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1971.272724][ T5554] EXT4-fs (loop2): get root inode failed [ 1971.307672][ T5554] EXT4-fs (loop2): mount failed 20:47:09 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xd9, 0xfc3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xd9, 0xfc3}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x6, 0x2}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r2}) 20:47:09 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000200)) 20:47:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x0, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r2, 0x21) r3 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r3, 0x21) dup3(r2, r3, 0x80000) sendfile(r1, r1, &(0x7f0000000040)=0x3f00, 0x7fff) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x2, r5, 0x0, 0x400, 0x0, 0x1d57e42, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) 20:47:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:47:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) 20:47:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:47:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x10000) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0x40086203, 0x0) 20:47:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x0, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1971.582714][ T5595] loop2: detected capacity change from 0 to 128 20:47:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) [ 1971.657559][ T5595] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1971.717383][ T5595] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x10000) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0x40086203, 0x0) 20:47:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x1, 0x8, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000180), 0x81, 0x10100) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000280)={&(0x7f00000001c0)=""/183, 0xb7}) 20:47:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x0, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1971.755349][ T5595] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1971.774456][ T5595] EXT4-fs (loop2): get root inode failed [ 1971.780314][ T5595] EXT4-fs (loop2): mount failed 20:47:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:47:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) 20:47:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x27f}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r9}) 20:47:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x10000) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0x40086203, 0x0) 20:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0xc70, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={0x0, "c55b68546dae1cac1de0510e4c86ba04"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001440)={r1, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r2, 0x0, 0x0}) 20:47:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1972.010254][ T5620] loop2: detected capacity change from 0 to 128 20:47:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3T1oJGUcBvBnZnc9c7fK+VEI4kcjogtBO9HmbBQO5DhEBBVORG2UO+G8w+4iCDYW2iupbILYGS0lTTpFsIqaIjaCiqDBQouV2dnVuFkxutldzfx+MMxHZub/DjPPOyn2ZQI01skkp5K0kvSSdJIUe3e4vZ5ODldXlzbPJf3+oz8Ug/3q9drouBNJVpLcl2SjLPJCO7m8/uTOz1sP3/nGpc4d764/sTTXixz6fmf7kd13zrz+wel7L3/6+bdnipxK90/XdfiKCdvaRXL9LIr9RxTtRbeAgzj7yvtfVLm/Yfic9tJJmfrmvXnxqo1O7n77r45967vPbp5nW4HD1+93qnfgSh9onDJJN0W5nKReLsvl5fp/+C9bx8sXL1x8uff8hUvnn110TwUclm6y/dBHxz48MZb/b1p1/oGjq8r/Y2fXvqqWd1sHOOC1a2bfKGC2bqlnVf57T1+5KwfNP3BkyD80l/xDc8k/NNe/yf9zk37MBvzveP9Dc8k/NJf8Q3PJPzSX/ENz7c0/ANAs/WOLHoEMLMqi+x8AAAAAAAAAAAAAAAAAAGCfdpJzq0ubg6nacPXMS97/4+8jkNvJqPaoftLKjfmjJcd/KgaNHCmGjZ7GU7dNeYIpvTfv0ddj13vt13OuP+aTWxdb/8r5ZOXVJPe02/ufv2LwPexpXPc3f+88M2WBf2j88x0PPD7f+uN+XVts/dNbyccPVvd/Uv9T5qbBfHL/063u35T1X/plyhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN78FAAD//+j2cX4=") 20:47:10 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20100cc, &(0x7f0000000400)=ANY=[], 0x1, 0x7b5, &(0x7f0000000440)="$eJzs3U1oHFUcAPD/bDbZfmlS8WBFNCDa4kfStCKpCE1ED4oHwV7Ei6FJS+z2gyaiLUJTvOpNvKlU8KoIetFL6cGLN29ePUm1iPbgcWVmZ5N1s5uP7SZjs78fTPPevJ2+N9n8983Oe8wLoG+Npv+UIg5ExFISMZzvTyJiMEuVI6bqr7v91/sn0y2JWu31P5PsNWk+mo5J7c0P2xURP99I4r6B1fUuXLp8ZqZanbuY58cXz14YX7h0+en5szOn507PnZuYPDZ5dPLIsWcnuz2145WWHS9/+vkbNz975fGrH709/f2bv/+dxFQcz8uaz6NXRmN0+XcSQ/Ufg/VfTbzY68oKMpCfT6lpX1IusEFsSqnpPXwghmMgVt684bjxbaGNAwC2RC3dAIA+k+j/AaDPNO4DNMb2tmIcDPh/ujUd2UD96vgvx1T2c1c2Zr3ndtI0MljOxrVHe1B/+n/88ePXX6ZbbNE4PNDe0tVs4L9N/CdZ/I9ks3ha478+Z2CqB/W3foaIf9g+dxL/r/WgfvEPAAAAAAAAvXN9OiIm243/lZbn/0Sb8b9KRBzuQf3rj/+VbvagGqCNW9MRz7ed/7v8RJeRgTx3TzYfYDA5NV+dS2P/3og4FIOVND+xRh0/vfvrC53Kmuf/pVtaf2MuYN6Om+WWB/nMzizO3Mk5A3W3rkY8WO48/yft/5M2/X9a9tYG6/jmk68e61Q2mm1rxT+wVWrXIg7mT/qL+G/8NyRrP59vPLseGG9cFaz28EvX/ulU//r9fydPbPZUgRZp/7+n7fX/cvyPJM3P61zYfB1ffHjioU5l3V7/DyUnsqeK5o/VjPdmFhcvTkQMJa+u3n9k822GnagRD414SeP/0KNZ/E91uv/X7vo/vWK4sME6J/b98FSnsu77f+BOpfE/u6n+f/OJ01eOnulU/8b6/2eyPv1Qvsf9P1jbRgO06HYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvlSJiXySlseV0qTQ2FrE3Iu6PPaXq+YXFJ0+df+fcbFoWMRKDpVPz1bnDETFczydpfiJLr+SPtOSPRsT+iPi4sjvLj508X50t+uQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILe3w/r/qd8qRbcOANgyu4puAACw7fT/ANB/9P8A0H/a9P8ni2gHALB9fP8HgP7TZf//Xa/bAQAAAAAAAAAAAAAAAAAAAAAAAAA71P5Hrv+SRMTSc7uzLTWUlw0W2jJgq5WKbgBQmIGiGwAUplx0A4DC+I4PJG33VpZTrUuErLzeHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrHwQPrrP/ffmEwYAdoXr2vVqtdKbApwDaz/j/0L+v/Q/+y/j+w3m2+lfX/l2p1jbz1/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6B8Lly6fmalW5y5K3NWJ+Q+6OGp3/kfQk2aUo7vDe1O7RFeJSueigj+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4K/wbAAD//3ZIMe8=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) chdir(&(0x7f00000001c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000500)=""/133, 0x85) [ 1972.071032][ T5620] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1972.109149][ T5620] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0xc70, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={0x0, "c55b68546dae1cac1de0510e4c86ba04"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001440)={r1, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r2, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000040), 0xc70, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={0x0, "c55b68546dae1cac1de0510e4c86ba04"}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001440)={r1, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r2, 0x0, 0x0}) (async) [ 1972.169251][ T5620] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1972.227423][ T5636] loop0: detected capacity change from 0 to 128 [ 1972.261492][ T5620] EXT4-fs (loop2): get root inode failed 20:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0xc70, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={0x0, "c55b68546dae1cac1de0510e4c86ba04"}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={0x0, "c55b68546dae1cac1de0510e4c86ba04"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001440)={r1, 0x0, 0x2}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001440)={r1, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r2, 0x0, 0x0}) [ 1972.284533][ T5636] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1972.298614][ T5620] EXT4-fs (loop2): mount failed [ 1972.325918][ T5636] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1972.354440][ T5641] loop1: detected capacity change from 0 to 2048 [ 1972.361790][ T5636] EXT4-fs error (device loop0): __ext4_get_inode_loc:4386: comm syz-executor.0: Invalid inode table block 1 in block_group 0 20:47:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1972.375474][ T5636] EXT4-fs (loop0): get root inode failed [ 1972.383890][ T5641] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1972.386539][ T5636] EXT4-fs (loop0): mount failed [ 1972.401912][T16248] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1972.412892][ T5641] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled 20:47:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1100) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)={r5}) 20:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001440)=""/199, 0xc7}, {&(0x7f0000001540)=""/150, 0x96}, {&(0x7f0000001600)=""/233, 0xe9}, {&(0x7f0000001700)=""/221, 0xdd}], 0x7, 0x10001, 0x8) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x610043, 0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x7bd4, &(0x7f0000000080)={0x0, 0x3e70, 0x429, 0x3, 0x342, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13f}}, 0x20) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x12000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000b80)={0x12, 0x10, 0xfa00, {&(0x7f0000000ac0), r4, r3}}, 0x18) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:47:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") [ 1972.491915][ T5641] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 1972.501006][ T5641] System zones: 0-19 20:47:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1972.536359][ T5641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1972.552206][ T5659] loop2: detected capacity change from 0 to 128 20:47:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1100) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)={r5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1100) (async) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)={r5}) (async) 20:47:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) (fail_nth: 1) 20:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001440)=""/199, 0xc7}, {&(0x7f0000001540)=""/150, 0x96}, {&(0x7f0000001600)=""/233, 0xe9}, {&(0x7f0000001700)=""/221, 0xdd}], 0x7, 0x10001, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x610043, 0x0) (async) syz_io_uring_complete(0x0) syz_io_uring_setup(0x7bd4, &(0x7f0000000080)={0x0, 0x3e70, 0x429, 0x3, 0x342, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) (async) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13f}}, 0x20) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x12000) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000b80)={0x12, 0x10, 0xfa00, {&(0x7f0000000ac0), r4, r3}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1972.637782][ T5659] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 1) 20:47:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1100) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)={r5}) [ 1972.699289][ T5659] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1972.718603][ T5670] FAULT_INJECTION: forcing a failure. [ 1972.718603][ T5670] name failslab, interval 1, probability 0, space 0, times 0 20:47:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1972.753906][ T5111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1972.774632][ T5670] CPU: 0 PID: 5670 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1972.784964][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1972.793380][ T5659] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1972.794997][ T5670] Call Trace: [ 1972.795005][ T5670] [ 1972.814099][ T5670] dump_stack_lvl+0x125/0x1b0 [ 1972.818796][ T5670] should_fail_ex+0x496/0x5b0 [ 1972.823499][ T5670] should_failslab+0x9/0x20 [ 1972.828014][ T5670] __kmem_cache_alloc_node+0x6b/0x310 [ 1972.833393][ T5670] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1972.839130][ T5670] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1972.844851][ T5670] __kmalloc+0x49/0x90 [ 1972.848928][ T5670] tomoyo_realpath_from_path+0xb9/0x710 20:47:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001440)=""/199, 0xc7}, {&(0x7f0000001540)=""/150, 0x96}, {&(0x7f0000001600)=""/233, 0xe9}, {&(0x7f0000001700)=""/221, 0xdd}], 0x7, 0x10001, 0x8) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x610043, 0x0) (async) syz_io_uring_complete(0x0) syz_io_uring_setup(0x7bd4, &(0x7f0000000080)={0x0, 0x3e70, 0x429, 0x3, 0x342, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) (async) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13f}}, 0x20) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x12000) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000b80)={0x12, 0x10, 0xfa00, {&(0x7f0000000ac0), r4, r3}}, 0x18) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1972.854488][ T5670] ? tomoyo_profile+0x47/0x60 [ 1972.859181][ T5670] tomoyo_path_number_perm+0x241/0x580 [ 1972.864659][ T5670] ? tomoyo_path_number_perm+0x22e/0x580 [ 1972.870299][ T5670] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1972.876124][ T5670] ? __fget_files+0x1c1/0x340 [ 1972.880804][ T5670] ? reacquire_held_locks+0x4c0/0x4c0 [ 1972.886202][ T5670] security_file_ioctl+0x72/0xb0 [ 1972.891154][ T5670] __x64_sys_ioctl+0xbb/0x210 [ 1972.895859][ T5670] do_syscall_64+0x40/0x110 [ 1972.897633][ T5659] EXT4-fs (loop2): get root inode failed [ 1972.900365][ T5670] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1972.900387][ T5670] RIP: 0033:0x7f58d407cce9 [ 1972.900402][ T5670] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1972.935846][ T5670] RSP: 002b:00007f58d4e940c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1972.944247][ T5670] RAX: ffffffffffffffda RBX: 00007f58d419bf80 RCX: 00007f58d407cce9 [ 1972.952205][ T5670] RDX: 0000000020000200 RSI: 00000000c00464af RDI: 0000000000000003 [ 1972.960159][ T5670] RBP: 00007f58d4e94120 R08: 0000000000000000 R09: 0000000000000000 [ 1972.968112][ T5670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1972.976064][ T5670] R13: 000000000000000b R14: 00007f58d419bf80 R15: 00007ffe271ba828 [ 1972.984028][ T5670] [ 1972.987125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1973.002531][ T5670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1973.005830][ T5659] EXT4-fs (loop2): mount failed 20:47:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) (fail_nth: 2) 20:47:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x5a7, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) [ 1973.132439][ T5688] FAULT_INJECTION: forcing a failure. [ 1973.132439][ T5688] name failslab, interval 1, probability 0, space 0, times 0 [ 1973.155073][ T5688] CPU: 1 PID: 5688 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1973.165413][ T5688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1973.175464][ T5688] Call Trace: [ 1973.178740][ T5688] [ 1973.181667][ T5688] dump_stack_lvl+0x125/0x1b0 [ 1973.186353][ T5688] should_fail_ex+0x496/0x5b0 [ 1973.191041][ T5688] should_failslab+0x9/0x20 [ 1973.195549][ T5688] __kmem_cache_alloc_node+0x6b/0x310 [ 1973.200929][ T5688] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1973.206650][ T5688] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1973.212359][ T5688] __kmalloc+0x49/0x90 [ 1973.216421][ T5688] tomoyo_realpath_from_path+0xb9/0x710 [ 1973.221958][ T5688] ? tomoyo_profile+0x47/0x60 [ 1973.226629][ T5688] tomoyo_path_number_perm+0x241/0x580 [ 1973.232075][ T5688] ? tomoyo_path_number_perm+0x22e/0x580 [ 1973.237695][ T5688] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1973.243506][ T5688] ? __fget_files+0x1c1/0x340 [ 1973.248170][ T5688] ? reacquire_held_locks+0x4c0/0x4c0 [ 1973.253556][ T5688] security_file_ioctl+0x72/0xb0 [ 1973.258486][ T5688] __x64_sys_ioctl+0xbb/0x210 [ 1973.263157][ T5688] do_syscall_64+0x40/0x110 [ 1973.267663][ T5688] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1973.273543][ T5688] RIP: 0033:0x7f733b67cce9 [ 1973.277944][ T5688] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1973.297542][ T5688] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1973.305942][ T5688] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1973.313899][ T5688] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1973.321858][ T5688] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1973.329819][ T5688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1973.337778][ T5688] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1973.345743][ T5688] [ 1973.353685][ T5691] FAULT_INJECTION: forcing a failure. [ 1973.353685][ T5691] name failslab, interval 1, probability 0, space 0, times 0 [ 1973.366491][ T5691] CPU: 1 PID: 5691 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 20:47:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) 20:47:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) syz_io_uring_setup(0x4ca4, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r5 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r5, 0x21) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}], 0xa, "852d6c59260bd681969d30431d7969da814a7fbb12fa9c29d4b425fe1d7d412f5f7f2dfafa7ff4d35db6e084911fc4e3e2abb7d0825cec088ca917fc748348318adad08335bf4dd74646631206a8eabe3e7bfbc203a30f8d8f16e50cee0ad2f847a48c4ea8f9a9dee191aee9ad8bec4dfea71347c2a3532908b5bb7b07d845e7647c2a24ccb8b024d62245b5359083dce78eba832edd9b2e22c74ce8ee5cd390a5363e59d69f68a9202df4afdf05e02625babe32bc050bcae6e6984c37fd163fcf331fc35f39c524e59cedc2552ce06994da48fcf23855efb62f00d8db"}, 0xec) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = creat(&(0x7f0000000200)='./file1\x00', 0x182) syz_io_uring_setup(0xda4, &(0x7f0000000240)={0x0, 0x5976, 0x200, 0x0, 0x43, 0x0, r8}, &(0x7f00000002c0), &(0x7f0000000380)) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_submit(r3, r7, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x2b, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x800, 0x2, 0x31}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345}) 20:47:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x5a7, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) [ 1973.376813][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1973.386867][ T5691] Call Trace: [ 1973.390147][ T5691] [ 1973.393082][ T5691] dump_stack_lvl+0x125/0x1b0 [ 1973.397769][ T5691] should_fail_ex+0x496/0x5b0 [ 1973.400304][ T5695] loop2: detected capacity change from 0 to 128 [ 1973.402446][ T5691] should_failslab+0x9/0x20 [ 1973.402472][ T5691] __kmem_cache_alloc_node+0x6b/0x310 [ 1973.418553][ T5691] ? tomoyo_encode2+0x100/0x3d0 [ 1973.423414][ T5691] ? tomoyo_encode2+0x100/0x3d0 [ 1973.428272][ T5691] __kmalloc+0x49/0x90 [ 1973.432357][ T5691] tomoyo_encode2+0x100/0x3d0 [ 1973.437049][ T5691] tomoyo_encode+0x29/0x50 [ 1973.441476][ T5691] tomoyo_realpath_from_path+0x196/0x710 [ 1973.444407][ T5695] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1973.447120][ T5691] tomoyo_path_number_perm+0x241/0x580 [ 1973.447143][ T5691] ? tomoyo_path_number_perm+0x22e/0x580 [ 1973.447167][ T5691] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1973.447214][ T5691] ? __fget_files+0x1c1/0x340 [ 1973.447233][ T5691] ? reacquire_held_locks+0x4c0/0x4c0 [ 1973.447275][ T5691] security_file_ioctl+0x72/0xb0 [ 1973.447304][ T5691] __x64_sys_ioctl+0xbb/0x210 [ 1973.447335][ T5691] do_syscall_64+0x40/0x110 [ 1973.447360][ T5691] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1973.447378][ T5691] RIP: 0033:0x7f58d407cce9 [ 1973.447393][ T5691] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1973.447410][ T5691] RSP: 002b:00007f58d4e940c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1973.447428][ T5691] RAX: ffffffffffffffda RBX: 00007f58d419bf80 RCX: 00007f58d407cce9 [ 1973.447441][ T5691] RDX: 0000000020000200 RSI: 00000000c00464af RDI: 0000000000000003 [ 1973.447453][ T5691] RBP: 00007f58d4e94120 R08: 0000000000000000 R09: 0000000000000000 [ 1973.447464][ T5691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1973.447475][ T5691] R13: 000000000000000b R14: 00007f58d419bf80 R15: 00007ffe271ba828 [ 1973.447499][ T5691] 20:47:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) [ 1973.529181][ C0] vkms_vblank_simulate: vblank timer overrun [ 1973.590011][ T5691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1973.597916][ T5688] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1973.602912][ T5695] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 2) 20:47:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) syz_io_uring_setup(0x4ca4, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r5 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r5, 0x21) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}], 0xa, "852d6c59260bd681969d30431d7969da814a7fbb12fa9c29d4b425fe1d7d412f5f7f2dfafa7ff4d35db6e084911fc4e3e2abb7d0825cec088ca917fc748348318adad08335bf4dd74646631206a8eabe3e7bfbc203a30f8d8f16e50cee0ad2f847a48c4ea8f9a9dee191aee9ad8bec4dfea71347c2a3532908b5bb7b07d845e7647c2a24ccb8b024d62245b5359083dce78eba832edd9b2e22c74ce8ee5cd390a5363e59d69f68a9202df4afdf05e02625babe32bc050bcae6e6984c37fd163fcf331fc35f39c524e59cedc2552ce06994da48fcf23855efb62f00d8db"}, 0xec) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = creat(&(0x7f0000000200)='./file1\x00', 0x182) syz_io_uring_setup(0xda4, &(0x7f0000000240)={0x0, 0x5976, 0x200, 0x0, 0x43, 0x0, r8}, &(0x7f00000002c0), &(0x7f0000000380)) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_submit(r3, r7, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x2b, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x800, 0x2, 0x31}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) syz_io_uring_setup(0x4ca4, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) (async) fchmod(r5, 0x21) (async) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}], 0xa, "852d6c59260bd681969d30431d7969da814a7fbb12fa9c29d4b425fe1d7d412f5f7f2dfafa7ff4d35db6e084911fc4e3e2abb7d0825cec088ca917fc748348318adad08335bf4dd74646631206a8eabe3e7bfbc203a30f8d8f16e50cee0ad2f847a48c4ea8f9a9dee191aee9ad8bec4dfea71347c2a3532908b5bb7b07d845e7647c2a24ccb8b024d62245b5359083dce78eba832edd9b2e22c74ce8ee5cd390a5363e59d69f68a9202df4afdf05e02625babe32bc050bcae6e6984c37fd163fcf331fc35f39c524e59cedc2552ce06994da48fcf23855efb62f00d8db"}, 0xec) (async) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) (async) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) creat(&(0x7f0000000200)='./file1\x00', 0x182) (async) syz_io_uring_setup(0xda4, &(0x7f0000000240)={0x0, 0x5976, 0x200, 0x0, 0x43, 0x0, r8}, &(0x7f00000002c0), &(0x7f0000000380)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) syz_io_uring_submit(r3, r7, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x2b, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x800, 0x2, 0x31}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345}) (async) 20:47:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) (fail_nth: 3) 20:47:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) 20:47:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x5a7, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x80) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x5a7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) (async) [ 1973.656668][ T5695] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1973.670736][ T5695] EXT4-fs (loop2): get root inode failed [ 1973.695927][ T5695] EXT4-fs (loop2): mount failed [ 1973.726331][ T5709] FAULT_INJECTION: forcing a failure. [ 1973.726331][ T5709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1973.755749][ T5709] CPU: 1 PID: 5709 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1973.766093][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1973.776152][ T5709] Call Trace: [ 1973.779434][ T5709] [ 1973.782368][ T5709] dump_stack_lvl+0x125/0x1b0 [ 1973.787059][ T5709] should_fail_ex+0x496/0x5b0 [ 1973.791761][ T5709] _copy_from_user+0x30/0xf0 [ 1973.796360][ T5709] drm_ioctl+0x4fd/0xbf0 [ 1973.800615][ T5709] ? drm_mode_rmfb+0x640/0x640 [ 1973.805392][ T5709] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1973.810427][ T5709] ? reacquire_held_locks+0x4c0/0x4c0 [ 1973.815828][ T5709] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1973.816167][ T5717] FAULT_INJECTION: forcing a failure. [ 1973.816167][ T5717] name failslab, interval 1, probability 0, space 0, times 0 [ 1973.820759][ T5709] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1973.820786][ T5709] __x64_sys_ioctl+0x18f/0x210 [ 1973.843109][ T5709] do_syscall_64+0x40/0x110 [ 1973.847620][ T5709] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1973.853534][ T5709] RIP: 0033:0x7f58d407cce9 [ 1973.857944][ T5709] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1973.877545][ T5709] RSP: 002b:00007f58d4e940c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1973.885953][ T5709] RAX: ffffffffffffffda RBX: 00007f58d419bf80 RCX: 00007f58d407cce9 [ 1973.893916][ T5709] RDX: 0000000020000200 RSI: 00000000c00464af RDI: 0000000000000003 [ 1973.901878][ T5709] RBP: 00007f58d4e94120 R08: 0000000000000000 R09: 0000000000000000 [ 1973.909839][ T5709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1973.917810][ T5709] R13: 000000000000000b R14: 00007f58d419bf80 R15: 00007ffe271ba828 [ 1973.925787][ T5709] [ 1973.928794][ T5717] CPU: 0 PID: 5717 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1973.939116][ T5717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1973.949153][ T5717] Call Trace: [ 1973.952416][ T5717] [ 1973.955332][ T5717] dump_stack_lvl+0x125/0x1b0 [ 1973.959999][ T5717] should_fail_ex+0x496/0x5b0 [ 1973.964669][ T5717] should_failslab+0x9/0x20 [ 1973.969165][ T5717] __kmem_cache_alloc_node+0x6b/0x310 [ 1973.974529][ T5717] ? tomoyo_encode2+0x100/0x3d0 [ 1973.979374][ T5717] ? tomoyo_encode2+0x100/0x3d0 [ 1973.984215][ T5717] __kmalloc+0x49/0x90 [ 1973.988281][ T5717] tomoyo_encode2+0x100/0x3d0 [ 1973.992949][ T5717] tomoyo_encode+0x29/0x50 [ 1973.997354][ T5717] tomoyo_realpath_from_path+0x196/0x710 [ 1974.002984][ T5717] tomoyo_path_number_perm+0x241/0x580 [ 1974.008430][ T5717] ? tomoyo_path_number_perm+0x22e/0x580 [ 1974.014049][ T5717] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1974.019855][ T5717] ? __fget_files+0x1c1/0x340 [ 1974.024517][ T5717] ? reacquire_held_locks+0x4c0/0x4c0 [ 1974.029894][ T5717] security_file_ioctl+0x72/0xb0 [ 1974.034827][ T5717] __x64_sys_ioctl+0xbb/0x210 [ 1974.039498][ T5717] do_syscall_64+0x40/0x110 [ 1974.043990][ T5717] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1974.049875][ T5717] RIP: 0033:0x7f733b67cce9 [ 1974.054279][ T5717] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1974.073872][ T5717] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1974.082271][ T5717] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1974.090226][ T5717] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1974.098178][ T5717] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1974.106143][ T5717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1974.114099][ T5717] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1974.122066][ T5717] [ 1974.125134][ C0] vkms_vblank_simulate: vblank timer overrun [ 1974.138160][ T5717] ERROR: Out of memory at tomoyo_realpath_from_path. 20:47:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) (fail_nth: 4) 20:47:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 20:47:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 3) 20:47:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) syz_io_uring_setup(0x4ca4, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) r5 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r5, 0x21) (async) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}], 0xa, "852d6c59260bd681969d30431d7969da814a7fbb12fa9c29d4b425fe1d7d412f5f7f2dfafa7ff4d35db6e084911fc4e3e2abb7d0825cec088ca917fc748348318adad08335bf4dd74646631206a8eabe3e7bfbc203a30f8d8f16e50cee0ad2f847a48c4ea8f9a9dee191aee9ad8bec4dfea71347c2a3532908b5bb7b07d845e7647c2a24ccb8b024d62245b5359083dce78eba832edd9b2e22c74ce8ee5cd390a5363e59d69f68a9202df4afdf05e02625babe32bc050bcae6e6984c37fd163fcf331fc35f39c524e59cedc2552ce06994da48fcf23855efb62f00d8db"}, 0xec) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) (async) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = creat(&(0x7f0000000200)='./file1\x00', 0x182) syz_io_uring_setup(0xda4, &(0x7f0000000240)={0x0, 0x5976, 0x200, 0x0, 0x43, 0x0, r8}, &(0x7f00000002c0), &(0x7f0000000380)) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) syz_io_uring_submit(r3, r7, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x2b, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x800, 0x2, 0x31}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345}) 20:47:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 20:47:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000300)="ae", 0x1, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x80) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x0, @val=@netkit}, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000080)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x420200, 0x0) [ 1974.303080][ T5727] FAULT_INJECTION: forcing a failure. [ 1974.303080][ T5727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1974.330821][ T5728] FAULT_INJECTION: forcing a failure. [ 1974.330821][ T5728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1974.338116][ T5729] loop2: detected capacity change from 0 to 128 20:47:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) [ 1974.411037][ T5728] CPU: 1 PID: 5728 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1974.421367][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1974.425061][ T5729] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1974.431413][ T5728] Call Trace: [ 1974.431421][ T5728] [ 1974.431429][ T5728] dump_stack_lvl+0x125/0x1b0 [ 1974.431458][ T5728] should_fail_ex+0x496/0x5b0 [ 1974.431489][ T5728] _copy_to_user+0x30/0xb0 [ 1974.431512][ T5728] drm_ioctl+0x5f3/0xbf0 [ 1974.465238][ T5728] ? drm_mode_rmfb+0x640/0x640 [ 1974.470006][ T5728] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1974.475038][ T5728] ? reacquire_held_locks+0x4c0/0x4c0 [ 1974.480426][ T5728] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1974.485358][ T5728] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1974.490380][ T5728] __x64_sys_ioctl+0x18f/0x210 [ 1974.495142][ T5728] do_syscall_64+0x40/0x110 [ 1974.499639][ T5728] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1974.505518][ T5728] RIP: 0033:0x7f58d407cce9 [ 1974.509914][ T5728] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1974.529506][ T5728] RSP: 002b:00007f58d4e940c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1974.537901][ T5728] RAX: ffffffffffffffda RBX: 00007f58d419bf80 RCX: 00007f58d407cce9 [ 1974.545858][ T5728] RDX: 0000000020000200 RSI: 00000000c00464af RDI: 0000000000000003 [ 1974.553812][ T5728] RBP: 00007f58d4e94120 R08: 0000000000000000 R09: 0000000000000000 [ 1974.561767][ T5728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1974.569723][ T5728] R13: 000000000000000b R14: 00007f58d419bf80 R15: 00007ffe271ba828 [ 1974.577689][ T5728] [ 1974.586712][ T5727] CPU: 0 PID: 5727 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1974.597044][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1974.607098][ T5727] Call Trace: [ 1974.610377][ T5727] [ 1974.613307][ T5727] dump_stack_lvl+0x125/0x1b0 [ 1974.615703][ T5729] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1974.617976][ T5727] should_fail_ex+0x496/0x5b0 [ 1974.618009][ T5727] _copy_from_user+0x30/0xf0 [ 1974.636679][ T5727] drm_ioctl+0x4fd/0xbf0 [ 1974.640932][ T5727] ? drm_prime_destroy_file_private+0x60/0x60 [ 1974.647005][ T5727] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1974.648238][ T5729] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1974.652020][ T5727] ? reacquire_held_locks+0x4c0/0x4c0 [ 1974.652063][ T5727] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1974.665390][ T5729] EXT4-fs (loop2): get root inode failed [ 1974.670293][ T5727] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1974.670319][ T5727] __x64_sys_ioctl+0x18f/0x210 [ 1974.670348][ T5727] do_syscall_64+0x40/0x110 [ 1974.670371][ T5727] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1974.670389][ T5727] RIP: 0033:0x7f733b67cce9 20:47:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffedd, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, r9, 0x0, 0x0], 0x5, r2, r3, 0x34fe, 0xe9, 0x8001, 0x6, {0x80, 0x4, 0xfaa, 0x6, 0xa4bf, 0x7, 0x2, 0x1, 0x8, 0x51c, 0x7f, 0x3, 0xd0ab, 0x0, "40f2e85857f35d7a7322b11574dbcf05f51b00a9855e540ec36805d7e1a628d5"}}) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r11, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r11, r11, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x1, 0x4, 0xa, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:47:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) (fail_nth: 5) [ 1974.670403][ T5727] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1974.670419][ T5727] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1974.670436][ T5727] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1974.670447][ T5727] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1974.670458][ T5727] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 20:47:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000300)="ae", 0x1, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x80) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x0, @val=@netkit}, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000080)) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x420200, 0x0) [ 1974.670468][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1974.670479][ T5727] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1974.670499][ T5727] [ 1974.670529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1974.794935][ T5729] EXT4-fs (loop2): mount failed [ 1974.810161][ T5745] FAULT_INJECTION: forcing a failure. [ 1974.810161][ T5745] name failslab, interval 1, probability 0, space 0, times 0 [ 1974.821518][ T5743] FAULT_INJECTION: forcing a failure. [ 1974.821518][ T5743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1974.841749][ T5743] CPU: 0 PID: 5743 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1974.852069][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 20:47:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 4) [ 1974.862115][ T5743] Call Trace: [ 1974.865391][ T5743] [ 1974.868319][ T5743] dump_stack_lvl+0x125/0x1b0 [ 1974.873004][ T5743] should_fail_ex+0x496/0x5b0 [ 1974.877702][ T5743] _copy_to_user+0x30/0xb0 [ 1974.882131][ T5743] simple_read_from_buffer+0xd0/0x160 [ 1974.887532][ T5743] proc_fail_nth_read+0x1b0/0x280 [ 1974.892579][ T5743] ? proc_fault_inject_read+0x280/0x280 [ 1974.898130][ T5743] ? security_file_permission+0xdc/0x100 [ 1974.903772][ T5743] ? proc_fault_inject_read+0x280/0x280 [ 1974.909350][ T5743] vfs_read+0x1ce/0x8f0 [ 1974.913521][ T5743] ? __fdget_pos+0xe7/0x170 [ 1974.918020][ T5743] ? kernel_read+0x1b0/0x1b0 [ 1974.922620][ T5743] ? mutex_trylock+0x130/0x130 [ 1974.927386][ T5743] ? drm_mode_rmfb+0x640/0x640 [ 1974.932149][ T5743] ? __fget_files+0x1c6/0x340 [ 1974.936821][ T5743] ksys_read+0x12f/0x250 [ 1974.941057][ T5743] ? vfs_write+0xdf0/0xdf0 [ 1974.945469][ T5743] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1974.951447][ T5743] do_syscall_64+0x40/0x110 [ 1974.955943][ T5743] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1974.961820][ T5743] RIP: 0033:0x7f58d407b98c [ 1974.966216][ T5743] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1974.985810][ T5743] RSP: 002b:00007f58d4e940c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1974.994209][ T5743] RAX: ffffffffffffffda RBX: 00007f58d419bf80 RCX: 00007f58d407b98c [ 1975.002162][ T5743] RDX: 000000000000000f RSI: 00007f58d4e94130 RDI: 0000000000000004 [ 1975.010117][ T5743] RBP: 00007f58d4e94120 R08: 0000000000000000 R09: 0000000000000000 [ 1975.018074][ T5743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1975.026030][ T5743] R13: 000000000000000b R14: 00007f58d419bf80 R15: 00007ffe271ba828 [ 1975.033992][ T5743] [ 1975.037012][ C0] vkms_vblank_simulate: vblank timer overrun [ 1975.038633][ T5745] CPU: 1 PID: 5745 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1975.053282][ T5745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1975.063332][ T5745] Call Trace: [ 1975.066606][ T5745] [ 1975.069523][ T5745] dump_stack_lvl+0x125/0x1b0 [ 1975.074192][ T5745] should_fail_ex+0x496/0x5b0 [ 1975.078864][ T5745] should_failslab+0x9/0x20 [ 1975.083366][ T5745] __kmem_cache_alloc_node+0x6b/0x310 [ 1975.088735][ T5745] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1975.094447][ T5745] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1975.100153][ T5745] __kmalloc+0x49/0x90 [ 1975.104219][ T5745] tomoyo_realpath_from_path+0xb9/0x710 [ 1975.109757][ T5745] ? tomoyo_profile+0x47/0x60 [ 1975.114426][ T5745] tomoyo_path_number_perm+0x241/0x580 [ 1975.119869][ T5745] ? tomoyo_path_number_perm+0x22e/0x580 [ 1975.125488][ T5745] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1975.131296][ T5745] ? __fget_files+0x1c1/0x340 [ 1975.135958][ T5745] ? reacquire_held_locks+0x4c0/0x4c0 [ 1975.141330][ T5745] security_file_ioctl+0x72/0xb0 [ 1975.146264][ T5745] __x64_sys_ioctl+0xbb/0x210 [ 1975.150932][ T5745] do_syscall_64+0x40/0x110 [ 1975.155422][ T5745] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1975.161299][ T5745] RIP: 0033:0x7f705327cce9 [ 1975.165701][ T5745] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1975.185294][ T5745] RSP: 002b:00007f705408f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1975.193691][ T5745] RAX: ffffffffffffffda RBX: 00007f705339bf80 RCX: 00007f705327cce9 [ 1975.201652][ T5745] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000003 20:47:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) [ 1975.209611][ T5745] RBP: 00007f705408f120 R08: 0000000000000000 R09: 0000000000000000 [ 1975.217564][ T5745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1975.225518][ T5745] R13: 000000000000000b R14: 00007f705339bf80 R15: 00007ffd5d4cda38 [ 1975.233485][ T5745] [ 1975.237907][ T5751] FAULT_INJECTION: forcing a failure. [ 1975.237907][ T5751] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.270868][ T5745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1975.273372][ T5751] CPU: 1 PID: 5751 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1975.287851][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1975.297912][ T5751] Call Trace: [ 1975.301191][ T5751] [ 1975.304130][ T5751] dump_stack_lvl+0x125/0x1b0 [ 1975.308825][ T5751] should_fail_ex+0x496/0x5b0 [ 1975.313523][ T5751] should_failslab+0x9/0x20 [ 1975.318047][ T5751] __kmem_cache_alloc_node+0x6b/0x310 [ 1975.323430][ T5751] ? dma_buf_dynamic_attach+0x650/0xa30 [ 1975.328981][ T5751] ? reacquire_held_locks+0x4c0/0x4c0 [ 1975.334374][ T5751] kmalloc_trace+0x25/0x60 [ 1975.338807][ T5751] dma_buf_dynamic_attach+0x650/0xa30 [ 1975.344197][ T5751] drm_gem_prime_import_dev+0xb4/0x3e0 [ 1975.349673][ T5751] drm_gem_prime_fd_to_handle+0x43a/0x550 [ 1975.355411][ T5751] drm_prime_fd_to_handle_ioctl+0xcf/0x100 [ 1975.361236][ T5751] drm_ioctl_kernel+0x28c/0x4d0 [ 1975.366100][ T5751] ? drm_prime_destroy_file_private+0x60/0x60 [ 1975.372179][ T5751] ? drm_setversion+0x870/0x870 [ 1975.377046][ T5751] drm_ioctl+0x5cb/0xbf0 [ 1975.381298][ T5751] ? drm_prime_destroy_file_private+0x60/0x60 [ 1975.387375][ T5751] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1975.392411][ T5751] ? reacquire_held_locks+0x4c0/0x4c0 [ 1975.397817][ T5751] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1975.402759][ T5751] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1975.407787][ T5751] __x64_sys_ioctl+0x18f/0x210 [ 1975.412566][ T5751] do_syscall_64+0x40/0x110 [ 1975.417091][ T5751] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1975.422989][ T5751] RIP: 0033:0x7f733b67cce9 [ 1975.427412][ T5751] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1975.435506][ T5756] loop2: detected capacity change from 0 to 128 [ 1975.447000][ T5751] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1975.447022][ T5751] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 20:47:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000300)="ae", 0x1, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x80) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x0, @val=@netkit}, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000080)) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x420200, 0x0) [ 1975.447034][ T5751] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1975.447045][ T5751] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1975.447057][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1975.447068][ T5751] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1975.447091][ T5751] [ 1975.499058][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 20:47:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffedd, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, r9, 0x0, 0x0], 0x5, r2, r3, 0x34fe, 0xe9, 0x8001, 0x6, {0x80, 0x4, 0xfaa, 0x6, 0xa4bf, 0x7, 0x2, 0x1, 0x8, 0x51c, 0x7f, 0x3, 0xd0ab, 0x0, "40f2e85857f35d7a7322b11574dbcf05f51b00a9855e540ec36805d7e1a628d5"}}) (async) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r11, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r11, r11, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x1, 0x4, 0xa, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:47:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x2, &(0x7f0000000200)) 20:47:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000040)={0x6, 0x5, 0x3, 0x5, 0x4, 0x100000001}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1975.534167][ T5756] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1975.548885][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.554946][ T5756] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1975.568546][ T5756] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 5) [ 1975.586580][ T5756] EXT4-fs (loop2): get root inode failed [ 1975.604148][ T5756] EXT4-fs (loop2): mount failed 20:47:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffedd, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, r9, 0x0, 0x0], 0x5, r2, r3, 0x34fe, 0xe9, 0x8001, 0x6, {0x80, 0x4, 0xfaa, 0x6, 0xa4bf, 0x7, 0x2, 0x1, 0x8, 0x51c, 0x7f, 0x3, 0xd0ab, 0x0, "40f2e85857f35d7a7322b11574dbcf05f51b00a9855e540ec36805d7e1a628d5"}}) (async) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r11, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r11, r11, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x1, 0x4, 0xa, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0x40086203, 0x0) 20:47:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x10, &(0x7f0000000200)) 20:47:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3U1oHGUYB/BnZneNSVaJehHEj4uILgS9iV7iRSEgIYgIKkREvSiJEBO8JYLgxYPelZx6CaW3pj2WXHJrKfSUtjmkl0JbCm3ooT1smZ3dkm62NM1md9vM7wfDfOzMPO8w839nD/uyARTWWERMREQpImoRUYmIZPcOb+XTWHN1ZXhjJqJe/+Jm0tgvX8+1jhuNiOWI+DAi1tMkfi5HLK59s31n87N3/l6ovH1s7evhvl5k043trc93/p/66+TkB4vnLlybSmIiqg9d1+FLOmwrJxEv96LYUyIpD7oF7Mf07ycuZrl/pfmc1qISaeQ375/559Yr8d5/jzr23+vnX+tnW4HDV69Xsnfgch0onDQiqpGk4xGRL6fp+Hj+Hf5SaST9ZW7+t9pPcwuzPwy6pwIOSzVi69PTQ6dG2/J/tZTnHzi6svx/Ob16OVveKe3jgD9f6H2jgN56PZ9l+a99t/Ru7Df/wJEh/1Bc8g/FJf9QXAfJ/4+dfswGPHO8/6G45B+KS/6huOQfikv+obh25x8AKJb60KBHIAODMuj+BwAAAAAAAAAAAAAAAAAA2KMcETMrwxuNKdvwfM9LfnTrwQjkckSrdqt+RKnxf8StlozcThqNbEmaje7Gt292eYIuHe/36Ou2633xSp/rtzn7xmDrL81GLP8REe+Xy3ufv6T5/B3cS4/5vPJ9lwWe0ETb+sdf9bd+u3urg60/uRlx5pPs/nfqf9J4tTHv3P9Us/vXZf1f73Z5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrmfgAAAP//YgZxqw==") 20:47:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r2, r2, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000040)={0x6, 0x5, 0x3, 0x5, 0x4, 0x100000001}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1975.674660][ T5770] FAULT_INJECTION: forcing a failure. [ 1975.674660][ T5770] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.711107][ T5773] FAULT_INJECTION: forcing a failure. [ 1975.711107][ T5773] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.767163][ T5770] CPU: 1 PID: 5770 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1975.777496][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1975.787549][ T5770] Call Trace: [ 1975.790820][ T5770] [ 1975.793744][ T5770] dump_stack_lvl+0x125/0x1b0 [ 1975.798425][ T5770] should_fail_ex+0x496/0x5b0 [ 1975.803110][ T5770] should_failslab+0x9/0x20 [ 1975.807619][ T5770] __kmem_cache_alloc_node+0x6b/0x310 [ 1975.813005][ T5770] ? tomoyo_encode2+0x100/0x3d0 [ 1975.817864][ T5770] ? tomoyo_encode2+0x100/0x3d0 [ 1975.822714][ T5770] __kmalloc+0x49/0x90 [ 1975.826785][ T5770] tomoyo_encode2+0x100/0x3d0 [ 1975.831462][ T5770] tomoyo_encode+0x29/0x50 [ 1975.835877][ T5770] tomoyo_realpath_from_path+0x196/0x710 [ 1975.841527][ T5770] tomoyo_path_number_perm+0x241/0x580 [ 1975.846990][ T5770] ? tomoyo_path_number_perm+0x22e/0x580 [ 1975.852612][ T5770] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1975.858429][ T5770] ? __fget_files+0x1c1/0x340 20:47:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x541b, &(0x7f0000000200)) [ 1975.863101][ T5770] ? reacquire_held_locks+0x4c0/0x4c0 [ 1975.868491][ T5770] security_file_ioctl+0x72/0xb0 [ 1975.873447][ T5770] __x64_sys_ioctl+0xbb/0x210 [ 1975.878145][ T5770] do_syscall_64+0x40/0x110 [ 1975.882656][ T5770] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1975.888552][ T5770] RIP: 0033:0x7f705327cce9 [ 1975.892963][ T5770] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1975.912569][ T5770] RSP: 002b:00007f705408f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1975.920988][ T5770] RAX: ffffffffffffffda RBX: 00007f705339bf80 RCX: 00007f705327cce9 [ 1975.928970][ T5770] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1975.936951][ T5770] RBP: 00007f705408f120 R08: 0000000000000000 R09: 0000000000000000 [ 1975.944930][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1975.952898][ T5770] R13: 000000000000000b R14: 00007f705339bf80 R15: 00007ffd5d4cda38 [ 1975.960873][ T5770] [ 1975.970137][ T5773] CPU: 0 PID: 5773 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1975.980476][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1975.985601][ T5783] loop2: detected capacity change from 0 to 128 [ 1975.990516][ T5773] Call Trace: [ 1976.000032][ T5773] [ 1976.002959][ T5773] dump_stack_lvl+0x125/0x1b0 [ 1976.007642][ T5773] should_fail_ex+0x496/0x5b0 [ 1976.012329][ T5773] should_failslab+0x9/0x20 [ 1976.016836][ T5773] __kmem_cache_alloc_node+0x6b/0x310 [ 1976.022226][ T5773] ? kvmalloc_node+0x99/0x1a0 [ 1976.022608][ T5770] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1976.026903][ T5773] ? kvmalloc_node+0x99/0x1a0 [ 1976.026926][ T5773] __kmalloc_node+0x4c/0x90 [ 1976.026953][ T5773] kvmalloc_node+0x99/0x1a0 [ 1976.026976][ T5773] drm_gem_get_pages+0x13f/0x8f0 [ 1976.027000][ T5773] ? __ww_mutex_lock.constprop.0+0x3c3/0x2660 [ 1976.027023][ T5773] ? drm_gem_vm_open+0xd0/0xd0 [ 1976.062966][ T5773] ? drm_gem_shmem_pin+0x75/0x2b0 [ 1976.067991][ T5773] drm_gem_shmem_get_pages+0xb9/0x300 [ 1976.073351][ T5773] drm_gem_shmem_pin+0xe3/0x2b0 [ 1976.078188][ T5773] ? drm_gem_shmem_pin+0x2b0/0x2b0 [ 1976.083288][ T5773] drm_gem_pin+0x66/0x90 [ 1976.087518][ T5773] ? drm_plane_create_scaling_filter_property+0xc0/0xc0 [ 1976.094437][ T5773] drm_gem_map_attach+0x87/0xc0 [ 1976.099273][ T5773] dma_buf_dynamic_attach+0x202/0xa30 [ 1976.104643][ T5773] drm_gem_prime_import_dev+0xb4/0x3e0 [ 1976.110094][ T5773] drm_gem_prime_fd_to_handle+0x43a/0x550 [ 1976.115801][ T5773] drm_prime_fd_to_handle_ioctl+0xcf/0x100 [ 1976.121593][ T5773] drm_ioctl_kernel+0x28c/0x4d0 [ 1976.126433][ T5773] ? drm_prime_destroy_file_private+0x60/0x60 [ 1976.132485][ T5773] ? drm_setversion+0x870/0x870 [ 1976.137325][ T5773] drm_ioctl+0x5cb/0xbf0 [ 1976.141559][ T5773] ? drm_prime_destroy_file_private+0x60/0x60 [ 1976.147609][ T5773] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1976.152619][ T5773] ? reacquire_held_locks+0x4c0/0x4c0 [ 1976.157990][ T5773] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1976.162911][ T5773] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1976.167925][ T5773] __x64_sys_ioctl+0x18f/0x210 [ 1976.172683][ T5773] do_syscall_64+0x40/0x110 [ 1976.177177][ T5773] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1976.183057][ T5773] RIP: 0033:0x7f733b67cce9 [ 1976.187455][ T5773] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1976.207047][ T5773] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1976.215443][ T5773] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1976.223398][ T5773] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1976.231354][ T5773] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1976.239307][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1976.247262][ T5773] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1976.255224][ T5773] [ 1976.258292][ C0] vkms_vblank_simulate: vblank timer overrun 20:47:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x5421, &(0x7f0000000200)) [ 1976.300146][ T5783] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x5450, &(0x7f0000000200)) [ 1976.382661][ T5783] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) 20:47:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:14 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000040)={0x6, 0x5, 0x3, 0x5, 0x4, 0x100000001}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:47:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 6) [ 1976.424061][ T5783] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1976.492868][ T5796] FAULT_INJECTION: forcing a failure. [ 1976.492868][ T5796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1976.526862][ T5783] EXT4-fs (loop2): get root inode failed 20:47:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x5451, &(0x7f0000000200)) [ 1976.546713][ T5796] CPU: 1 PID: 5796 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1976.557046][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1976.566851][ T5783] EXT4-fs (loop2): mount failed [ 1976.567084][ T5796] Call Trace: [ 1976.567093][ T5796] [ 1976.567099][ T5796] dump_stack_lvl+0x125/0x1b0 [ 1976.582790][ T5796] should_fail_ex+0x496/0x5b0 [ 1976.587481][ T5796] _copy_from_user+0x30/0xf0 [ 1976.592077][ T5796] drm_ioctl+0x4fd/0xbf0 [ 1976.596317][ T5796] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1976.601680][ T5796] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1976.606696][ T5796] ? reacquire_held_locks+0x4c0/0x4c0 [ 1976.612072][ T5796] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1976.617000][ T5796] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1976.622022][ T5796] __x64_sys_ioctl+0x18f/0x210 [ 1976.626792][ T5796] do_syscall_64+0x40/0x110 [ 1976.631286][ T5796] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1976.637166][ T5796] RIP: 0033:0x7f705327cce9 [ 1976.641565][ T5796] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1976.661156][ T5796] RSP: 002b:00007f705408f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1976.669551][ T5796] RAX: ffffffffffffffda RBX: 00007f705339bf80 RCX: 00007f705327cce9 [ 1976.677511][ T5796] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1976.685472][ T5796] RBP: 00007f705408f120 R08: 0000000000000000 R09: 0000000000000000 20:47:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 7) [ 1976.693426][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1976.701380][ T5796] R13: 000000000000000b R14: 00007f705339bf80 R15: 00007ffd5d4cda38 [ 1976.709341][ T5796] 20:47:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x105000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:47:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3U1oHGUYB/BnZneNSVaJehHEj4uILgS9iV4igkJAQhARVIiIelESISZ4SwTBiwe9Kzl5CaW3pj2WXHJrKfSUtjmkl0JbCm3ooT1smZ3dkm62NM1md9vM7wfDfOzMPO8w839nD/uyARTWWERMREQpImoRUYmIZPcOb+TTWHN1ZXhjJqJe//xG0tgvX8+1jhuNiOWIeD8i1tMkfipHLK59vX1789O3/lqovPn/2lfDfb3IpuvbW5/t/Df154nJ9xbPnr86lcREVB+4rsOXdNhWTiJe7EWxJ0RSHnQL2I/p345fyHL/UvM5rUUl0shv3t/zz6xX4p1/H3bsP9fOvdLPtgKHr16vZO/A5TpQOGlEVCNJxyMiX07T8fH8O/zF0kj689z8r7Uf5xZmvx90TwUclmrE1ienhk6OtuX/SinPP3B0Zfn/Ynr1Ura8U9rHAX881/tGAb31aj7L8l/7dunt2G/+gSND/qG45B+KS/6huA6S/x86/ZgNeOp4/0NxyT8Ul/xDcck/FJf8Q3Htzj8AUCz1oUGPQAYGZdD9DwAAAAAAAAAAAAAAAAAAsEc5ImZWhjcaU7bh2Z6X/ODm/RHI5YhW7Vb9iFLj/4hbLRm5lTQa2ZI0G92Nb17v8gRdOtbv0ddt1/v85T7Xb3PmtcHWX5qNWP49It4tl/c+f0nz+Tu4Fx7xeeW7Lgs8po/b1j/8sr/1291dHWz9yc2I0x9l979T/5PGy4155/6nmt2/Luv/cqfLEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANA39wIAAP//slFxrg==") 20:47:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 8) 20:47:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x5452, &(0x7f0000000200)) 20:47:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r2}) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x20]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="2e2f66696c659f00"]) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x7, 0x7, 0x2, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) r11 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r11, 0xc01864b1, &(0x7f0000000240)={r13, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r8}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000640)={r9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[r13, r14, r15], 0x3, 0x80800}) r16 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) r17 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) r18 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r18, 0x21) fchmod(r3, 0x21) pwritev(r17, &(0x7f0000000340)=[{&(0x7f00000004c0)="1887a2c3d3249258ea872aef79ea3f14bc6e354f392dc445a241bdc1c585df05e7ed1c129b116d743edcc9b4ee7acc5ceea0b5ae080c9d87b770ec4e11df3713cbbc745b5675b443900f94c2666d984f26f2f9e7c6b9caebafe2affb1ff0b860a83c9fcc495057d6fce9bd13ba83697b3c4ea637713d2daf8ba7e846447cda8ed19bc4c35bc81a3eb865d937f897d7307b7d9ce2437353661dd6572b79267524c74cefcaa7b1789754ce5c2b9b557499cd6b2e8decc4d0ac64674a3077e507b2ca1eb21b33330cdee13cef43c061d5e2e546276e13e10b8698be5250c9cace7797615ae79c20a1c2ce4e52aea8e3e023164c", 0xf2}], 0x1, 0x5c34, 0x8001) pwritev2(r16, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r16, r16, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_GET_CAP(r16, 0xc010640c, &(0x7f0000000300)={0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0x40086203, 0x0) 20:47:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x5460, &(0x7f0000000200)) [ 1976.872725][ T5809] loop2: detected capacity change from 0 to 128 20:47:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x105000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1976.928900][ T5809] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 9) 20:47:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x8933, &(0x7f0000000200)) [ 1976.972631][ T5809] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1977.009678][ T5818] FAULT_INJECTION: forcing a failure. [ 1977.009678][ T5818] name failslab, interval 1, probability 0, space 0, times 0 20:47:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x105000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1977.036059][ T5809] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1977.070479][ T5818] CPU: 0 PID: 5818 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1977.080812][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1977.090357][ T5809] EXT4-fs (loop2): get root inode failed [ 1977.090852][ T5818] Call Trace: [ 1977.090859][ T5818] [ 1977.090866][ T5818] dump_stack_lvl+0x125/0x1b0 [ 1977.107343][ T5818] should_fail_ex+0x496/0x5b0 [ 1977.112060][ T5818] should_failslab+0x9/0x20 [ 1977.116595][ T5818] __kmem_cache_alloc_node+0x6b/0x310 [ 1977.120107][ T5809] EXT4-fs (loop2): mount failed [ 1977.121958][ T5818] ? vgem_gem_create_object+0x3b/0xb0 [ 1977.121988][ T5818] kmalloc_trace+0x25/0x60 [ 1977.136563][ T5818] ? vgem_postclose+0x50/0x50 [ 1977.141241][ T5818] vgem_gem_create_object+0x3b/0xb0 [ 1977.146441][ T5818] ? vgem_postclose+0x50/0x50 [ 1977.151122][ T5818] __drm_gem_shmem_create+0x85/0x410 [ 1977.156421][ T5818] drm_gem_shmem_dumb_create+0x1e3/0x310 [ 1977.162073][ T5818] drm_mode_create_dumb_ioctl+0x268/0x2f0 [ 1977.167802][ T5818] drm_ioctl_kernel+0x28c/0x4d0 [ 1977.172656][ T5818] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1977.178034][ T5818] ? drm_setversion+0x870/0x870 [ 1977.182881][ T5818] drm_ioctl+0x5cb/0xbf0 [ 1977.187118][ T5818] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1977.192481][ T5818] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1977.197491][ T5818] ? reacquire_held_locks+0x4c0/0x4c0 [ 1977.202863][ T5818] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1977.207784][ T5818] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1977.212792][ T5818] __x64_sys_ioctl+0x18f/0x210 [ 1977.217549][ T5818] do_syscall_64+0x40/0x110 [ 1977.222039][ T5818] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1977.227922][ T5818] RIP: 0033:0x7f705327cce9 [ 1977.232326][ T5818] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1977.251920][ T5818] RSP: 002b:00007f705408f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1977.260318][ T5818] RAX: ffffffffffffffda RBX: 00007f705339bf80 RCX: 00007f705327cce9 [ 1977.268276][ T5818] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1977.276234][ T5818] RBP: 00007f705408f120 R08: 0000000000000000 R09: 0000000000000000 20:47:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={0x0, 0x0, 0x0}) 20:47:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x400448c9, &(0x7f0000000200)) [ 1977.284189][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1977.292147][ T5818] R13: 000000000000000b R14: 00007f705339bf80 R15: 00007ffd5d4cda38 [ 1977.300114][ T5818] [ 1977.303205][ C0] vkms_vblank_simulate: vblank timer overrun 20:47:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 5) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 10) 20:47:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r2}) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x20]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="2e2f66696c659f00"]) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x7, 0x7, 0x2, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r11 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r11, 0xc01864b1, &(0x7f0000000240)={r13, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r8}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000640)={r9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[r13, r14, r15], 0x3, 0x80800}) (async) r16 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (async) r17 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) (async, rerun: 64) r18 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) (rerun: 64) fchmod(r18, 0x21) fchmod(r3, 0x21) (async) pwritev(r17, &(0x7f0000000340)=[{&(0x7f00000004c0)="1887a2c3d3249258ea872aef79ea3f14bc6e354f392dc445a241bdc1c585df05e7ed1c129b116d743edcc9b4ee7acc5ceea0b5ae080c9d87b770ec4e11df3713cbbc745b5675b443900f94c2666d984f26f2f9e7c6b9caebafe2affb1ff0b860a83c9fcc495057d6fce9bd13ba83697b3c4ea637713d2daf8ba7e846447cda8ed19bc4c35bc81a3eb865d937f897d7307b7d9ce2437353661dd6572b79267524c74cefcaa7b1789754ce5c2b9b557499cd6b2e8decc4d0ac64674a3077e507b2ca1eb21b33330cdee13cef43c061d5e2e546276e13e10b8698be5250c9cace7797615ae79c20a1c2ce4e52aea8e3e023164c", 0xf2}], 0x1, 0x5c34, 0x8001) (async) pwritev2(r16, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r16, r16, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_GET_CAP(r16, 0xc010640c, &(0x7f0000000300)={0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0x40086203, 0x0) 20:47:15 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={0x0, 0x0, 0x0}) 20:47:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x400448dd, &(0x7f0000000200)) 20:47:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={0x0, 0x0, 0x0}) 20:47:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x400454ca, &(0x7f0000000200)) [ 1977.458834][ T5838] FAULT_INJECTION: forcing a failure. [ 1977.458834][ T5838] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1977.502143][ T5838] CPU: 0 PID: 5838 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1977.510255][ T5849] loop2: detected capacity change from 0 to 128 [ 1977.512472][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1977.512483][ T5838] Call Trace: [ 1977.512490][ T5838] [ 1977.512497][ T5838] dump_stack_lvl+0x125/0x1b0 [ 1977.512523][ T5838] should_fail_ex+0x496/0x5b0 [ 1977.544312][ T5838] ? fs_reclaim_acquire+0xb0/0x150 20:47:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x4040) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000040)="c1b375040000a4d0f3c0c8e30000000000959dd19bc459b38b656bff84f983e485ff2fee5bc6fbe4833b221f4eb079a933f92568cc4a6d7407827b8ae06dcc25ba3af7f7c03983d7848b6d44ce45fd6486230fce760d", 0x56, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x10000, r0, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r3], 0x1, 0x80000}) 20:47:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x40049409, &(0x7f0000000200)) [ 1977.549434][ T5838] __should_fail_alloc_page+0xe7/0x130 [ 1977.554897][ T5838] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 1977.561063][ T5838] ? hlock_class+0x4e/0x130 [ 1977.565576][ T5838] __alloc_pages+0x193/0x2420 [ 1977.570266][ T5838] ? print_usage_bug.part.0+0x550/0x550 [ 1977.574206][ T5842] FAULT_INJECTION: forcing a failure. [ 1977.574206][ T5842] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.575810][ T5838] ? lock_acquire+0x1ae/0x520 [ 1977.575843][ T5838] ? hlock_class+0x4e/0x130 [ 1977.575865][ T5838] ? __lock_acquire+0x14f0/0x3b20 20:47:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x4040) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000040)="c1b375040000a4d0f3c0c8e30000000000959dd19bc459b38b656bff84f983e485ff2fee5bc6fbe4833b221f4eb079a933f92568cc4a6d7407827b8ae06dcc25ba3af7f7c03983d7848b6d44ce45fd6486230fce760d", 0x56, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x10000, r0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r3], 0x1, 0x80000}) [ 1977.602571][ T5838] ? warn_alloc+0x3a0/0x3a0 [ 1977.607086][ T5838] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 1977.613078][ T5838] ? lockdep_hardirqs_on+0x7d/0x110 [ 1977.618276][ T5838] ? smp_call_function_many_cond+0x592/0x1550 [ 1977.624346][ T5838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1977.630242][ T5838] ? policy_nodemask+0x313/0x480 [ 1977.635187][ T5838] alloc_pages_mpol+0x258/0x5f0 [ 1977.640055][ T5838] ? mempolicy_in_oom_domain+0x150/0x150 [ 1977.645693][ T5838] ? do_raw_spin_lock+0x12e/0x2b0 [ 1977.650727][ T5838] ? spin_bug+0x1d0/0x1d0 [ 1977.655056][ T5838] ? lookup_address_in_pgd+0x2e6/0x330 [ 1977.660013][ T5849] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1977.660526][ T5838] __change_page_attr_set_clr+0x459/0x26c0 [ 1977.675936][ T5838] ? static_protections+0x650/0x650 [ 1977.676872][ T5849] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1977.681138][ T5838] ? _vm_unmap_aliases+0x6b8/0x9b0 [ 1977.681166][ T5838] ? __purge_vmap_area_lazy+0x2170/0x2170 [ 1977.701385][ T5838] ? folio_unlock+0x81/0xd0 [ 1977.705914][ T5838] ? shmem_read_folio_gfp+0xf9/0x170 [ 1977.711216][ T5838] change_page_attr_set_clr+0x2c8/0x490 [ 1977.716773][ T5838] ? folio_flags.constprop.0+0x56/0x150 [ 1977.720282][ T5849] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1977.722312][ T5838] ? __change_page_attr_set_clr+0x26c0/0x26c0 [ 1977.722345][ T5838] ? memtype_reserve+0x155/0xba0 [ 1977.746223][ T5838] _set_pages_array+0x171/0x260 [ 1977.751088][ T5838] drm_gem_shmem_get_pages+0x1f4/0x300 [ 1977.756554][ T5838] drm_gem_shmem_pin+0xe3/0x2b0 [ 1977.761403][ T5838] ? drm_gem_shmem_pin+0x2b0/0x2b0 [ 1977.766525][ T5838] drm_gem_pin+0x66/0x90 [ 1977.768215][ T5849] EXT4-fs (loop2): get root inode failed [ 1977.770758][ T5838] ? drm_plane_create_scaling_filter_property+0xc0/0xc0 [ 1977.770781][ T5838] drm_gem_map_attach+0x87/0xc0 [ 1977.770799][ T5838] dma_buf_dynamic_attach+0x202/0xa30 [ 1977.788797][ T5849] EXT4-fs (loop2): mount failed [ 1977.793503][ T5838] drm_gem_prime_import_dev+0xb4/0x3e0 [ 1977.793529][ T5838] drm_gem_prime_fd_to_handle+0x43a/0x550 [ 1977.793552][ T5838] drm_prime_fd_to_handle_ioctl+0xcf/0x100 [ 1977.815315][ T5838] drm_ioctl_kernel+0x28c/0x4d0 [ 1977.820181][ T5838] ? drm_prime_destroy_file_private+0x60/0x60 [ 1977.826252][ T5838] ? drm_setversion+0x870/0x870 [ 1977.831102][ T5838] drm_ioctl+0x5cb/0xbf0 [ 1977.835333][ T5838] ? drm_prime_destroy_file_private+0x60/0x60 [ 1977.841386][ T5838] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1977.846399][ T5838] ? reacquire_held_locks+0x4c0/0x4c0 [ 1977.851774][ T5838] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1977.856699][ T5838] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1977.861712][ T5838] __x64_sys_ioctl+0x18f/0x210 [ 1977.866469][ T5838] do_syscall_64+0x40/0x110 [ 1977.870962][ T5838] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1977.876840][ T5838] RIP: 0033:0x7f733b67cce9 [ 1977.881239][ T5838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1977.900828][ T5838] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1977.909226][ T5838] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1977.917179][ T5838] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1977.925136][ T5838] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1977.933089][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1977.941045][ T5838] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1977.949010][ T5838] [ 1977.952119][ C0] vkms_vblank_simulate: vblank timer overrun [ 1977.955798][ T5842] CPU: 1 PID: 5842 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1977.968407][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1977.978465][ T5842] Call Trace: [ 1977.981741][ T5842] [ 1977.984674][ T5842] dump_stack_lvl+0x125/0x1b0 [ 1977.989358][ T5842] should_fail_ex+0x496/0x5b0 [ 1977.994056][ T5842] should_failslab+0x9/0x20 [ 1977.998573][ T5842] kmem_cache_alloc_lru+0x7a/0x6f0 [ 1978.003703][ T5842] ? shmem_alloc_inode+0x25/0x50 [ 1978.008645][ T5842] ? shmem_destroy_inode+0xe0/0xe0 [ 1978.013767][ T5842] ? shmem_alloc_inode+0x25/0x50 [ 1978.018693][ T5842] shmem_alloc_inode+0x25/0x50 [ 1978.023484][ T5842] alloc_inode+0x5d/0x220 [ 1978.027806][ T5842] new_inode+0x22/0x260 [ 1978.031951][ T5842] shmem_get_inode+0x194/0xe80 [ 1978.036706][ T5842] __shmem_file_setup+0x16c/0x300 [ 1978.041721][ T5842] drm_gem_object_init+0x38/0xa0 [ 1978.046648][ T5842] __drm_gem_shmem_create+0x104/0x410 [ 1978.052008][ T5842] drm_gem_shmem_dumb_create+0x1e3/0x310 [ 1978.057629][ T5842] drm_mode_create_dumb_ioctl+0x268/0x2f0 [ 1978.063342][ T5842] drm_ioctl_kernel+0x28c/0x4d0 [ 1978.068180][ T5842] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1978.073539][ T5842] ? drm_setversion+0x870/0x870 [ 1978.078382][ T5842] drm_ioctl+0x5cb/0xbf0 [ 1978.082616][ T5842] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1978.087978][ T5842] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1978.092986][ T5842] ? reacquire_held_locks+0x4c0/0x4c0 [ 1978.098357][ T5842] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1978.103277][ T5842] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1978.108289][ T5842] __x64_sys_ioctl+0x18f/0x210 [ 1978.113049][ T5842] do_syscall_64+0x40/0x110 [ 1978.117545][ T5842] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1978.123421][ T5842] RIP: 0033:0x7f705327cce9 [ 1978.127817][ T5842] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1978.147407][ T5842] RSP: 002b:00007f705408f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1978.155801][ T5842] RAX: ffffffffffffffda RBX: 00007f705339bf80 RCX: 00007f705327cce9 [ 1978.163756][ T5842] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000004 [ 1978.171714][ T5842] RBP: 00007f705408f120 R08: 0000000000000000 R09: 0000000000000000 [ 1978.179667][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1978.187625][ T5842] R13: 000000000000000b R14: 00007f705339bf80 R15: 00007ffd5d4cda38 [ 1978.195589][ T5842] 20:47:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 11) 20:47:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x40086602, &(0x7f0000000200)) 20:47:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x20]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="2e2f66696c659f00"]) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x7, 0x7, 0x2, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) r11 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r11, 0xc01864b1, &(0x7f0000000240)={r13, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r8}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000640)={r9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[r13, r14, r15], 0x3, 0x80800}) r16 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (async) r17 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) r18 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r18, 0x21) fchmod(r3, 0x21) pwritev(r17, &(0x7f0000000340)=[{&(0x7f00000004c0)="1887a2c3d3249258ea872aef79ea3f14bc6e354f392dc445a241bdc1c585df05e7ed1c129b116d743edcc9b4ee7acc5ceea0b5ae080c9d87b770ec4e11df3713cbbc745b5675b443900f94c2666d984f26f2f9e7c6b9caebafe2affb1ff0b860a83c9fcc495057d6fce9bd13ba83697b3c4ea637713d2daf8ba7e846447cda8ed19bc4c35bc81a3eb865d937f897d7307b7d9ce2437353661dd6572b79267524c74cefcaa7b1789754ce5c2b9b557499cd6b2e8decc4d0ac64674a3077e507b2ca1eb21b33330cdee13cef43c061d5e2e546276e13e10b8698be5250c9cace7797615ae79c20a1c2ce4e52aea8e3e023164c", 0xf2}], 0x1, 0x5c34, 0x8001) (async) pwritev2(r16, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r16, r16, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_GET_CAP(r16, 0xc010640c, &(0x7f0000000300)={0x4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0x40086203, 0x0) 20:47:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x4040) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000040)="c1b375040000a4d0f3c0c8e30000000000959dd19bc459b38b656bff84f983e485ff2fee5bc6fbe4833b221f4eb079a933f92568cc4a6d7407827b8ae06dcc25ba3af7f7c03983d7848b6d44ce45fd6486230fce760d", 0x56, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x10000, r0, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r3], 0x1, 0x80000}) [ 1978.360941][ T5875] loop2: detected capacity change from 0 to 128 20:47:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x40186366, &(0x7f0000000200)) [ 1978.401229][ T5880] FAULT_INJECTION: forcing a failure. [ 1978.401229][ T5880] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.418154][ T5875] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1978.450127][ T5880] CPU: 1 PID: 5880 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1978.457078][ T5875] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1978.460443][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1978.460455][ T5880] Call Trace: [ 1978.460462][ T5880] [ 1978.460468][ T5880] dump_stack_lvl+0x125/0x1b0 [ 1978.490793][ T5880] should_fail_ex+0x496/0x5b0 [ 1978.495488][ T5880] should_failslab+0x9/0x20 [ 1978.499998][ T5880] kmem_cache_alloc+0x69/0x2f0 [ 1978.504773][ T5880] security_inode_alloc+0x38/0x180 [ 1978.509888][ T5880] inode_init_always+0xc2f/0xf50 [ 1978.514840][ T5880] alloc_inode+0x7a/0x220 [ 1978.519185][ T5880] new_inode+0x22/0x260 [ 1978.523371][ T5880] shmem_get_inode+0x194/0xe80 [ 1978.528141][ T5880] __shmem_file_setup+0x16c/0x300 [ 1978.533190][ T5880] drm_gem_object_init+0x38/0xa0 [ 1978.538141][ T5880] __drm_gem_shmem_create+0x104/0x410 [ 1978.543519][ T5880] drm_gem_shmem_dumb_create+0x1e3/0x310 [ 1978.549156][ T5880] drm_mode_create_dumb_ioctl+0x268/0x2f0 [ 1978.554879][ T5880] drm_ioctl_kernel+0x28c/0x4d0 [ 1978.559722][ T5880] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1978.565084][ T5880] ? drm_setversion+0x870/0x870 [ 1978.569931][ T5880] drm_ioctl+0x5cb/0xbf0 [ 1978.574163][ T5880] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1978.579527][ T5880] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1978.584538][ T5880] ? reacquire_held_locks+0x4c0/0x4c0 [ 1978.589909][ T5880] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1978.594832][ T5880] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1978.599849][ T5880] __x64_sys_ioctl+0x18f/0x210 [ 1978.604610][ T5880] do_syscall_64+0x40/0x110 [ 1978.609106][ T5880] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1978.614987][ T5880] RIP: 0033:0x7f705327cce9 [ 1978.619386][ T5880] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1978.638980][ T5880] RSP: 002b:00007f705408f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1978.647377][ T5880] RAX: ffffffffffffffda RBX: 00007f705339bf80 RCX: 00007f705327cce9 [ 1978.655330][ T5880] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1978.663286][ T5880] RBP: 00007f705408f120 R08: 0000000000000000 R09: 0000000000000000 [ 1978.671242][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1978.679215][ T5880] R13: 000000000000000b R14: 00007f705339bf80 R15: 00007ffd5d4cda38 [ 1978.687180][ T5880] [ 1978.707171][ T5886] FAULT_INJECTION: forcing a failure. [ 1978.707171][ T5886] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.708687][ T5875] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1978.722028][ T5886] CPU: 1 PID: 5886 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1978.743001][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1978.753047][ T5886] Call Trace: 20:47:16 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000400)={r2, 0x0, 0x0}) 20:47:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x401c5820, &(0x7f0000000200)) [ 1978.756319][ T5886] [ 1978.759245][ T5886] dump_stack_lvl+0x125/0x1b0 [ 1978.763925][ T5886] should_fail_ex+0x496/0x5b0 [ 1978.768620][ T5886] should_failslab+0x9/0x20 [ 1978.773128][ T5886] __kmem_cache_alloc_node+0x6b/0x310 [ 1978.778502][ T5886] ? drm_prime_pages_to_sg+0x4d/0x140 [ 1978.783877][ T5886] kmalloc_trace+0x25/0x60 [ 1978.788308][ T5886] drm_prime_pages_to_sg+0x4d/0x140 [ 1978.793507][ T5886] ? drm_gem_shmem_get_sg_table+0x210/0x210 [ 1978.799415][ T5886] drm_gem_map_dma_buf+0xd9/0x1e0 [ 1978.804438][ T5886] __map_dma_buf+0x7c/0x230 [ 1978.808947][ T5886] dma_buf_map_attachment+0x1c7/0x340 [ 1978.814324][ T5886] dma_buf_map_attachment_unlocked+0x9e/0x150 [ 1978.820396][ T5886] drm_gem_prime_import_dev+0x11b/0x3e0 [ 1978.825935][ T5886] drm_gem_prime_fd_to_handle+0x43a/0x550 [ 1978.831644][ T5886] drm_prime_fd_to_handle_ioctl+0xcf/0x100 [ 1978.837436][ T5886] drm_ioctl_kernel+0x28c/0x4d0 [ 1978.842278][ T5886] ? drm_prime_destroy_file_private+0x60/0x60 [ 1978.848333][ T5886] ? drm_setversion+0x870/0x870 [ 1978.853183][ T5886] drm_ioctl+0x5cb/0xbf0 [ 1978.857420][ T5886] ? drm_prime_destroy_file_private+0x60/0x60 [ 1978.863475][ T5886] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1978.868487][ T5886] ? reacquire_held_locks+0x4c0/0x4c0 [ 1978.873861][ T5886] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1978.878785][ T5886] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1978.883800][ T5886] __x64_sys_ioctl+0x18f/0x210 [ 1978.888559][ T5886] do_syscall_64+0x40/0x110 [ 1978.893053][ T5886] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1978.898933][ T5886] RIP: 0033:0x7f733b67cce9 [ 1978.903329][ T5886] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1978.922919][ T5886] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1978.931315][ T5886] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1978.939272][ T5886] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1978.947227][ T5886] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1978.955182][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1978.963136][ T5886] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1978.971099][ T5886] 20:47:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 7) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 12) 20:47:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x4020940d, &(0x7f0000000200)) 20:47:17 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x0, 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000400)={r2, 0x0, 0x0}) [ 1979.014616][ T5875] EXT4-fs (loop2): get root inode failed [ 1979.025151][ T5875] EXT4-fs (loop2): mount failed 20:47:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") 20:47:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x80086301, &(0x7f0000000200)) 20:47:17 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000400)={r2, 0x0, 0x0}) [ 1979.090269][ T5898] FAULT_INJECTION: forcing a failure. [ 1979.090269][ T5898] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.176368][ T5898] CPU: 0 PID: 5898 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1979.186710][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1979.196761][ T5898] Call Trace: [ 1979.200039][ T5898] [ 1979.202968][ T5898] dump_stack_lvl+0x125/0x1b0 [ 1979.207648][ T5898] should_fail_ex+0x496/0x5b0 [ 1979.212340][ T5898] should_failslab+0x9/0x20 [ 1979.216846][ T5898] kmem_cache_alloc_lru+0x7a/0x6f0 [ 1979.221958][ T5898] ? inode_owner_or_capable+0x240/0x240 [ 1979.227496][ T5898] ? __d_alloc+0x32/0xac0 [ 1979.231809][ T5898] ? dquot_alloc_inode+0x4b5/0x730 [ 1979.236906][ T5898] ? __d_alloc+0x32/0xac0 [ 1979.241221][ T5898] __d_alloc+0x32/0xac0 [ 1979.245365][ T5898] d_alloc_pseudo+0x1c/0x70 [ 1979.249861][ T5898] alloc_file_pseudo+0xdc/0x240 [ 1979.254704][ T5898] ? alloc_file+0x7f0/0x7f0 [ 1979.259209][ T5898] ? shmem_get_inode+0x6d4/0xe80 [ 1979.264134][ T5898] __shmem_file_setup+0x20d/0x300 [ 1979.269153][ T5898] drm_gem_object_init+0x38/0xa0 [ 1979.274092][ T5898] __drm_gem_shmem_create+0x104/0x410 [ 1979.279455][ T5898] drm_gem_shmem_dumb_create+0x1e3/0x310 [ 1979.285083][ T5898] drm_mode_create_dumb_ioctl+0x268/0x2f0 [ 1979.290800][ T5898] drm_ioctl_kernel+0x28c/0x4d0 [ 1979.295645][ T5898] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1979.301011][ T5898] ? drm_setversion+0x870/0x870 [ 1979.305853][ T5898] drm_ioctl+0x5cb/0xbf0 [ 1979.310086][ T5898] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1979.315447][ T5898] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1979.320458][ T5898] ? reacquire_held_locks+0x4c0/0x4c0 [ 1979.325833][ T5898] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1979.330756][ T5898] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1979.335768][ T5898] __x64_sys_ioctl+0x18f/0x210 [ 1979.340528][ T5898] do_syscall_64+0x40/0x110 [ 1979.345019][ T5898] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1979.350894][ T5898] RIP: 0033:0x7f705327cce9 [ 1979.355291][ T5898] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1979.374883][ T5898] RSP: 002b:00007f705408f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1979.383279][ T5898] RAX: ffffffffffffffda RBX: 00007f705339bf80 RCX: 00007f705327cce9 [ 1979.391236][ T5898] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1979.399190][ T5898] RBP: 00007f705408f120 R08: 0000000000000000 R09: 0000000000000000 [ 1979.407157][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1979.415109][ T5898] R13: 000000000000000b R14: 00007f705339bf80 R15: 00007ffd5d4cda38 [ 1979.423070][ T5898] [ 1979.426110][ C0] vkms_vblank_simulate: vblank timer overrun 20:47:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x9, "11863804146fed31c63abb80367c42bdc935dd1447b7f0408a75d5858192fa47", 0xffffffffffffffff}) close_range(r1, r4, 0x2) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"e719057285bf13f9272714d3344738756e6506caac7faf5c9bda2f3f99fdeb40"}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x40a0c0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, r9}) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r7, r7, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000200)={0x10000001, 0x8000, 0x7fff}) 20:47:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x80086601, &(0x7f0000000200)) [ 1979.543082][ T5910] loop2: detected capacity change from 0 to 128 [ 1979.556726][ T5906] FAULT_INJECTION: forcing a failure. [ 1979.556726][ T5906] name failslab, interval 1, probability 0, space 0, times 0 20:47:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0xc2080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={0x0, 0x1}) 20:47:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x801c581f, &(0x7f0000000200)) [ 1979.626010][ T5910] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1979.663780][ T5910] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1979.673610][ T5906] CPU: 1 PID: 5906 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1979.683949][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1979.694005][ T5906] Call Trace: [ 1979.697287][ T5906] [ 1979.700218][ T5906] dump_stack_lvl+0x125/0x1b0 [ 1979.704902][ T5906] should_fail_ex+0x496/0x5b0 [ 1979.709605][ T5906] should_failslab+0x9/0x20 [ 1979.714120][ T5906] __kmem_cache_alloc_node+0x6b/0x310 [ 1979.714457][ T5910] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 [ 1979.719487][ T5906] ? drm_prime_pages_to_sg+0x4d/0x140 [ 1979.719513][ T5906] kmalloc_trace+0x25/0x60 [ 1979.719540][ T5906] drm_prime_pages_to_sg+0x4d/0x140 [ 1979.719561][ T5906] ? drm_gem_shmem_get_sg_table+0x210/0x210 [ 1979.753254][ T5906] drm_gem_map_dma_buf+0xd9/0x1e0 [ 1979.756235][ T5910] EXT4-fs (loop2): get root inode failed [ 1979.758272][ T5906] __map_dma_buf+0x7c/0x230 [ 1979.758297][ T5906] dma_buf_map_attachment+0x1c7/0x340 [ 1979.758319][ T5906] dma_buf_map_attachment_unlocked+0x9e/0x150 [ 1979.772954][ T5910] EXT4-fs (loop2): mount failed [ 1979.773747][ T5906] drm_gem_prime_import_dev+0x11b/0x3e0 [ 1979.790179][ T5906] drm_gem_prime_fd_to_handle+0x43a/0x550 [ 1979.795921][ T5906] drm_prime_fd_to_handle_ioctl+0xcf/0x100 [ 1979.801731][ T5906] drm_ioctl_kernel+0x28c/0x4d0 [ 1979.806573][ T5906] ? drm_prime_destroy_file_private+0x60/0x60 [ 1979.812628][ T5906] ? drm_setversion+0x870/0x870 [ 1979.817474][ T5906] drm_ioctl+0x5cb/0xbf0 [ 1979.821709][ T5906] ? drm_prime_destroy_file_private+0x60/0x60 [ 1979.827761][ T5906] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1979.832769][ T5906] ? reacquire_held_locks+0x4c0/0x4c0 [ 1979.838141][ T5906] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1979.843062][ T5906] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1979.848074][ T5906] __x64_sys_ioctl+0x18f/0x210 [ 1979.852832][ T5906] do_syscall_64+0x40/0x110 [ 1979.857326][ T5906] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1979.863207][ T5906] RIP: 0033:0x7f733b67cce9 [ 1979.867606][ T5906] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1979.887200][ T5906] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1979.895595][ T5906] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1979.903556][ T5906] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1979.911513][ T5906] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1979.919470][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1979.927426][ T5906] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1979.935389][ T5906] 20:47:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc0045878, &(0x7f0000000200)) 20:47:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 13) 20:47:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0xc2080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0xc2080) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={0x0, 0x1}) (async) 20:47:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc0045878, &(0x7f0000000200)) [ 1980.094829][ T5926] FAULT_INJECTION: forcing a failure. [ 1980.094829][ T5926] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.108473][ T5926] CPU: 1 PID: 5926 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1980.118806][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1980.128867][ T5926] Call Trace: [ 1980.132151][ T5926] [ 1980.135092][ T5926] dump_stack_lvl+0x125/0x1b0 [ 1980.139792][ T5926] should_fail_ex+0x496/0x5b0 [ 1980.144505][ T5926] should_failslab+0x9/0x20 [ 1980.149023][ T5926] kmem_cache_alloc+0x69/0x2f0 [ 1980.153793][ T5926] ? reacquire_held_locks+0x4c0/0x4c0 [ 1980.159180][ T5926] alloc_empty_file+0x73/0x1d0 [ 1980.163958][ T5926] alloc_file+0x5e/0x7f0 [ 1980.168201][ T5926] alloc_file_pseudo+0x174/0x240 [ 1980.173128][ T5926] ? alloc_file+0x7f0/0x7f0 [ 1980.177624][ T5926] ? shmem_get_inode+0x6d4/0xe80 [ 1980.182551][ T5926] __shmem_file_setup+0x20d/0x300 [ 1980.187567][ T5926] drm_gem_object_init+0x38/0xa0 [ 1980.192498][ T5926] __drm_gem_shmem_create+0x104/0x410 [ 1980.197864][ T5926] drm_gem_shmem_dumb_create+0x1e3/0x310 [ 1980.203488][ T5926] drm_mode_create_dumb_ioctl+0x268/0x2f0 [ 1980.209207][ T5926] drm_ioctl_kernel+0x28c/0x4d0 [ 1980.214046][ T5926] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1980.219408][ T5926] ? drm_setversion+0x870/0x870 [ 1980.224249][ T5926] drm_ioctl+0x5cb/0xbf0 [ 1980.228480][ T5926] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1980.233843][ T5926] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1980.238853][ T5926] ? reacquire_held_locks+0x4c0/0x4c0 [ 1980.244237][ T5926] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1980.249159][ T5926] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1980.254176][ T5926] __x64_sys_ioctl+0x18f/0x210 [ 1980.258937][ T5926] do_syscall_64+0x40/0x110 [ 1980.263428][ T5926] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1980.269307][ T5926] RIP: 0033:0x7f705327cce9 [ 1980.273705][ T5926] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1980.293294][ T5926] RSP: 002b:00007f705408f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1980.301693][ T5926] RAX: ffffffffffffffda RBX: 00007f705339bf80 RCX: 00007f705327cce9 [ 1980.309651][ T5926] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1980.317607][ T5926] RBP: 00007f705408f120 R08: 0000000000000000 R09: 0000000000000000 [ 1980.325563][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1980.333516][ T5926] R13: 000000000000000b R14: 00007f705339bf80 R15: 00007ffd5d4cda38 [ 1980.341480][ T5926] 20:47:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3U1oHGUYB/BnZneNSVaJehHEj4uILgS9iV7iRSEgIYgIKkREvSiJEBO8JYLgxYPelZx6CaW3pj2WXHJrKfSUtjmkl0JbCm3ooT1smZ3dkm62NM1md9vM7wfDfGRmnneY+b+Tw75MAIU1FhETEVGKiFpEVCIi2b3DW/k01lxdGd6YiajXv7iZNPbL13Ot40YjYjkiPoyI9TSJn8sRi2vfbN/Z/Oydvxcqbx9b+3q4rxfZdGN76/Od/6f+Ojn5weK5C9emkpiI6kPXdfiSDtvKScTLvSj2lEjKg24B+zH9+4mLWe5faT6ntahEGvnN+2f+ufVKvPffo4799/r51/rZVuDw1euV7B24XAcKJ42IaiTpeETky2k6Pp7/D3+pNJL+Mjf/W+2nuYXZHwbdUwGHpRqx9enpoVOjbfm/WsrzDxxdWf6/nF69nC3vlPZxwJ8v9L5RQG+9ns+y/Ne+W3o39pt/4MiQfygu+Yfikn8oroPk/8dOP2YDnjne/1Bc8g/FJf9QXPIPxSX/UFy78w8AFEt9aNAjkIFBGXT/AwAAAAAAAAAAAAAAAAAA7FGOiJmV4Y3GlG14vuclP7r1YARyOaJVu1U/otT4HnGrJSO3k0YjW5Jmo7vx7ZtdnqBLx/s9+rrtel+80uf6bc6+Mdj6S7MRy39ExPvl8t7nL2k+fwf30mP+Xvm+ywJPaKTt+x0ff9Xf+u3urQ62/uRmxJlPsvvfqf9J49XGvHP/U83uX5f1f73b5QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADom/sBAAD//yyIcXY=") 20:47:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464cf, &(0x7f0000000200)) 20:47:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0xc2080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={0x0, 0x1}) [ 1980.415707][ T5933] FAULT_INJECTION: forcing a failure. [ 1980.415707][ T5933] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.441334][ T5933] CPU: 1 PID: 5933 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1980.451670][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1980.461725][ T5933] Call Trace: [ 1980.465004][ T5933] [ 1980.467933][ T5933] dump_stack_lvl+0x125/0x1b0 [ 1980.472619][ T5933] should_fail_ex+0x496/0x5b0 [ 1980.477315][ T5933] should_failslab+0x9/0x20 [ 1980.481830][ T5933] __kmem_cache_alloc_node+0x6b/0x310 [ 1980.487204][ T5933] ? sg_alloc_append_table_from_pages+0x4ec/0xda0 [ 1980.493622][ T5933] ? dma_buf_map_attachment+0x1c7/0x340 [ 1980.499158][ T5933] ? drm_gem_prime_fd_to_handle+0x43a/0x550 [ 1980.505054][ T5933] ? sg_alloc_append_table_from_pages+0x4ec/0xda0 [ 1980.511462][ T5933] __kmalloc+0x49/0x90 [ 1980.515525][ T5933] sg_alloc_append_table_from_pages+0x4ec/0xda0 [ 1980.521764][ T5933] sg_alloc_table_from_pages_segment+0xfa/0x1e0 [ 1980.527997][ T5933] ? sg_alloc_append_table_from_pages+0xda0/0xda0 [ 1980.534402][ T5933] ? dma_direct_all_ram_mapped+0x71/0x80 [ 1980.540021][ T5933] ? dma_addressing_limited+0x140/0x240 [ 1980.545557][ T5933] ? drm_prime_pages_to_sg+0xcb/0x140 [ 1980.550915][ T5933] drm_prime_pages_to_sg+0xcb/0x140 [ 1980.556101][ T5933] ? drm_gem_shmem_get_sg_table+0x210/0x210 [ 1980.561981][ T5933] drm_gem_map_dma_buf+0xd9/0x1e0 [ 1980.566995][ T5933] __map_dma_buf+0x7c/0x230 [ 1980.571491][ T5933] dma_buf_map_attachment+0x1c7/0x340 [ 1980.576852][ T5933] dma_buf_map_attachment_unlocked+0x9e/0x150 [ 1980.582904][ T5933] drm_gem_prime_import_dev+0x11b/0x3e0 [ 1980.588438][ T5933] drm_gem_prime_fd_to_handle+0x43a/0x550 [ 1980.594148][ T5933] drm_prime_fd_to_handle_ioctl+0xcf/0x100 [ 1980.599944][ T5933] drm_ioctl_kernel+0x28c/0x4d0 [ 1980.604780][ T5933] ? drm_prime_destroy_file_private+0x60/0x60 [ 1980.610843][ T5933] ? drm_setversion+0x870/0x870 [ 1980.615706][ T5933] drm_ioctl+0x5cb/0xbf0 [ 1980.619945][ T5933] ? drm_prime_destroy_file_private+0x60/0x60 [ 1980.625995][ T5933] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1980.631006][ T5933] ? reacquire_held_locks+0x4c0/0x4c0 [ 1980.636382][ T5933] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1980.641304][ T5933] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1980.646322][ T5933] __x64_sys_ioctl+0x18f/0x210 [ 1980.651085][ T5933] do_syscall_64+0x40/0x110 [ 1980.655576][ T5933] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1980.661455][ T5933] RIP: 0033:0x7f733b67cce9 [ 1980.665856][ T5933] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1980.685453][ T5933] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1980.693850][ T5933] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1980.701804][ T5933] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 20:47:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x9, "11863804146fed31c63abb80367c42bdc935dd1447b7f0408a75d5858192fa47", 0xffffffffffffffff}) close_range(r1, r4, 0x2) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"e719057285bf13f9272714d3344738756e6506caac7faf5c9bda2f3f99fdeb40"}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x40a0c0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, r9}) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r7, r7, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000200)={0x10000001, 0x8000, 0x7fff}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x9, "11863804146fed31c63abb80367c42bdc935dd1447b7f0408a75d5858192fa47"}) (async) close_range(r1, r4, 0x2) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) (async) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"e719057285bf13f9272714d3344738756e6506caac7faf5c9bda2f3f99fdeb40"}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x40a0c0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (async) syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, r9}) (async) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) sendfile(r7, r7, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000200)={0x10000001, 0x8000, 0x7fff}) (async) [ 1980.709761][ T5933] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1980.717723][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1980.725692][ T5933] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1980.733659][ T5933] 20:47:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 9) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc0189436, &(0x7f0000000200)) 20:47:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 14) 20:47:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) open(&(0x7f0000000040)='./file0\x00', 0x103400, 0x144) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:47:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$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") [ 1980.892516][ T5944] FAULT_INJECTION: forcing a failure. [ 1980.892516][ T5944] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.905802][ T5944] CPU: 1 PID: 5944 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1980.916135][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1980.926199][ T5944] Call Trace: [ 1980.929487][ T5944] [ 1980.932429][ T5944] dump_stack_lvl+0x125/0x1b0 [ 1980.937113][ T5944] should_fail_ex+0x496/0x5b0 [ 1980.941798][ T5944] should_failslab+0x9/0x20 [ 1980.946304][ T5944] kmem_cache_alloc+0x69/0x2f0 [ 1980.951078][ T5944] ? memcg_slab_post_alloc_hook+0x1e8/0x380 [ 1980.956981][ T5944] security_file_alloc+0x41/0x250 [ 1980.962004][ T5944] ? reacquire_held_locks+0x4c0/0x4c0 [ 1980.967369][ T5944] init_file+0x99/0x250 [ 1980.971513][ T5944] alloc_empty_file+0x91/0x1d0 [ 1980.976265][ T5944] alloc_file+0x5e/0x7f0 [ 1980.980499][ T5944] alloc_file_pseudo+0x174/0x240 [ 1980.985422][ T5944] ? alloc_file+0x7f0/0x7f0 [ 1980.989910][ T5944] ? shmem_get_inode+0x6d4/0xe80 [ 1980.994835][ T5944] __shmem_file_setup+0x20d/0x300 [ 1980.999855][ T5944] drm_gem_object_init+0x38/0xa0 [ 1981.004784][ T5944] __drm_gem_shmem_create+0x104/0x410 [ 1981.010155][ T5944] drm_gem_shmem_dumb_create+0x1e3/0x310 [ 1981.015787][ T5944] drm_mode_create_dumb_ioctl+0x268/0x2f0 [ 1981.021503][ T5944] drm_ioctl_kernel+0x28c/0x4d0 [ 1981.026347][ T5944] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1981.031716][ T5944] ? drm_setversion+0x870/0x870 [ 1981.036562][ T5944] drm_ioctl+0x5cb/0xbf0 [ 1981.040799][ T5944] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1981.046167][ T5944] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1981.051176][ T5944] ? reacquire_held_locks+0x4c0/0x4c0 [ 1981.056549][ T5944] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1981.061469][ T5944] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1981.066482][ T5944] __x64_sys_ioctl+0x18f/0x210 [ 1981.071240][ T5944] do_syscall_64+0x40/0x110 [ 1981.075735][ T5944] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1981.081611][ T5944] RIP: 0033:0x7f705327cce9 [ 1981.086010][ T5944] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1981.105603][ T5944] RSP: 002b:00007f705408f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.114008][ T5944] RAX: ffffffffffffffda RBX: 00007f705339bf80 RCX: 00007f705327cce9 [ 1981.121961][ T5944] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1981.129919][ T5944] RBP: 00007f705408f120 R08: 0000000000000000 R09: 0000000000000000 20:47:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) open(&(0x7f0000000040)='./file0\x00', 0x103400, 0x144) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) [ 1981.137877][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1981.145832][ T5944] R13: 000000000000000b R14: 00007f705339bf80 R15: 00007ffd5d4cda38 [ 1981.153794][ T5944] [ 1981.183116][ T5955] FAULT_INJECTION: forcing a failure. [ 1981.183116][ T5955] name failslab, interval 1, probability 0, space 0, times 0 20:47:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x9, "11863804146fed31c63abb80367c42bdc935dd1447b7f0408a75d5858192fa47"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x9, "11863804146fed31c63abb80367c42bdc935dd1447b7f0408a75d5858192fa47", 0xffffffffffffffff}) close_range(r1, r4, 0x2) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0x40086203, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"e719057285bf13f9272714d3344738756e6506caac7faf5c9bda2f3f99fdeb40"}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x40a0c0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x40a0c0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x60f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, r9}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, r9}) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) sendfile(r7, r7, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000200)={0x10000001, 0x8000, 0x7fff}) 20:47:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000040), 0xff, 0x25b, &(0x7f00000002c0)="$eJzs3U1oHGUYB/BnZneNSVaJehHEj4uILgS9iV7iRSEgIYgIKkREvSiJEBO8JYLgxYPelZx6CaW3pj2WXHJrKfSUtjmkl0JbCm3ooT1smZ3dkm62NM1md9vM7wfDfOzMPO8w839nD/uyARTWWERMREQpImoRUYmIZPcOb+XTWHN1ZXhjJqJe/+Jm0tgvX8+1jhuNiOWI+DAi1tMkfi5HLK59s31n87N3/l6ovH1s7evhvl5k043trc93/p/66+TkB4vnLlybSmIiqg9d1+FLOmwrJxEv96LYUyIpD7oF7Mf07ycuZrl/pfmc1qISaeQ375/559Yr8d5/jzr23+vnX+tnW4HDV69Xsnfgch0onDQiqpGk4xGRL6fp+Hj+Hf5SaST9ZW7+t9pPcwuzPwy6pwIOSzVi69PTQ6dG2/J/tZTnHzi6svx/Ob16OVveKe3jgD9f6H2jgN56PZ9l+a99t/Ru7Df/wJEh/1Bc8g/FJf9QXAfJ/4+dfswGPHO8/6G45B+KS/6huOQfikv+obh25x8AKJb60KBHIAODMuj+BwAAAAAAAAAAAAAAAAAA2KMcETMrwxuNKdvwfM9LfnTrwQjkckSrdqt+RKnxf8StlozcThqNbEmaje7Gt292eYIuHe/36Ou2633xSp/rtzn7xmDrL81GLP8REe+Xy3ufv6T5/B3cS4/5vPJ9lwWeVFtgPv6qz/Xb3FsdbP3JzYgzn2T3v1P/k8arjXnn/qea3b8u6/96t8sTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Df3AwAA//8bzHFv") 20:47:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc020660b, &(0x7f0000000200)) [ 1981.215234][ T5955] CPU: 1 PID: 5955 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1981.225562][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1981.235622][ T5955] Call Trace: [ 1981.238898][ T5955] [ 1981.241830][ T5955] dump_stack_lvl+0x125/0x1b0 [ 1981.246520][ T5955] should_fail_ex+0x496/0x5b0 [ 1981.251235][ T5955] should_failslab+0x9/0x20 [ 1981.255748][ T5955] __kmem_cache_alloc_node+0x6b/0x310 [ 1981.261130][ T5955] ? __drm_gem_shmem_create+0x32b/0x410 [ 1981.266680][ T5955] kmalloc_trace+0x25/0x60 [ 1981.271103][ T5955] __drm_gem_shmem_create+0x32b/0x410 [ 1981.276476][ T5955] drm_gem_shmem_prime_import_sg_table+0x75/0x140 [ 1981.282885][ T5955] drm_gem_prime_import_dev+0x18a/0x3e0 [ 1981.288422][ T5955] drm_gem_prime_fd_to_handle+0x43a/0x550 [ 1981.294133][ T5955] drm_prime_fd_to_handle_ioctl+0xcf/0x100 [ 1981.299928][ T5955] drm_ioctl_kernel+0x28c/0x4d0 [ 1981.304768][ T5955] ? drm_prime_destroy_file_private+0x60/0x60 [ 1981.310820][ T5955] ? drm_setversion+0x870/0x870 [ 1981.315669][ T5955] drm_ioctl+0x5cb/0xbf0 [ 1981.319902][ T5955] ? drm_prime_destroy_file_private+0x60/0x60 [ 1981.325964][ T5955] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1981.330981][ T5955] ? reacquire_held_locks+0x4c0/0x4c0 [ 1981.336361][ T5955] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1981.341288][ T5955] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1981.346301][ T5955] __x64_sys_ioctl+0x18f/0x210 [ 1981.351061][ T5955] do_syscall_64+0x40/0x110 [ 1981.355552][ T5955] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1981.361431][ T5955] RIP: 0033:0x7f733b67cce9 [ 1981.365830][ T5955] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1981.385420][ T5955] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.393816][ T5955] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1981.401773][ T5955] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1981.409725][ T5955] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1981.417678][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.425638][ T5955] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1981.433604][ T5955] 20:47:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/146}) 20:47:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae", 0x1, 0x0}) (async) open(&(0x7f0000000040)='./file0\x00', 0x103400, 0x144) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000400)={r1, 0x0, 0x0}) 20:47:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x1, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000700)={0x1, r4, 0x3, 0x7, 0x10001, 0x0, 0x6}) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x2, 0x7, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000004c0), 0x1, 0x408000) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) bind$bt_hci(r6, &(0x7f00000006c0)={0x1f, 0x1}, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0x40086203, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000600)={0x0, r2, r3, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000640)={r10, 0x10001, 0x7, 0x400, 0x1, [], [0x0, 0x3, 0x12397ded, 0x6], [0x800, 0x0, 0x7487, 0x1000], [0x8000000000000001, 0x8000000000000001, 0x80, 0x8001]}) 20:47:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 20:47:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 15) 20:47:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/146}) [ 1981.531385][ T5967] loop2: detected capacity change from 0 to 128 [ 1981.577896][ T5967] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:47:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (fail_nth: 11) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) [ 1981.623610][ T5978] FAULT_INJECTION: forcing a failure. [ 1981.623610][ T5978] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.635019][ T5967] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6696!=39978) [ 1981.687009][ T5983] FAULT_INJECTION: forcing a failure. [ 1981.687009][ T5983] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.697687][ T5978] CPU: 0 PID: 5978 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1981.709889][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1981.719934][ T5978] Call Trace: [ 1981.723207][ T5978] [ 1981.726129][ T5978] dump_stack_lvl+0x125/0x1b0 [ 1981.730809][ T5978] should_fail_ex+0x496/0x5b0 [ 1981.735490][ T5978] should_failslab+0x9/0x20 [ 1981.739991][ T5978] __kmem_cache_alloc_node+0x6b/0x310 [ 1981.745365][ T5978] ? vma_node_allow+0x56/0x300 [ 1981.750132][ T5978] ? bit_wait_timeout+0x160/0x160 [ 1981.755164][ T5978] kmalloc_trace+0x25/0x60 [ 1981.759583][ T5978] vma_node_allow+0x56/0x300 [ 1981.764172][ T5978] drm_gem_handle_create_tail+0x222/0x540 [ 1981.769892][ T5978] ? drm_gem_prime_import_dev+0x22e/0x3e0 [ 1981.775606][ T5978] drm_gem_prime_fd_to_handle+0x220/0x550 [ 1981.781337][ T5978] drm_prime_fd_to_handle_ioctl+0xcf/0x100 [ 1981.787142][ T5978] drm_ioctl_kernel+0x28c/0x4d0 [ 1981.791987][ T5978] ? drm_prime_destroy_file_private+0x60/0x60 [ 1981.798052][ T5978] ? drm_setversion+0x870/0x870 [ 1981.802915][ T5978] drm_ioctl+0x5cb/0xbf0 [ 1981.807171][ T5978] ? drm_prime_destroy_file_private+0x60/0x60 [ 1981.813254][ T5978] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1981.818283][ T5978] ? reacquire_held_locks+0x4c0/0x4c0 [ 1981.823682][ T5978] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1981.828630][ T5978] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1981.833653][ T5978] __x64_sys_ioctl+0x18f/0x210 [ 1981.838440][ T5978] do_syscall_64+0x40/0x110 [ 1981.842959][ T5978] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1981.848859][ T5978] RIP: 0033:0x7f733b67cce9 [ 1981.853279][ T5978] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1981.872885][ T5978] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.881305][ T5978] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1981.889281][ T5978] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1981.897247][ T5978] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1981.905219][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.913184][ T5978] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1981.921179][ T5978] [ 1981.924228][ T5983] CPU: 1 PID: 5983 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1981.924315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1981.934542][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1981.950543][ T5983] Call Trace: [ 1981.953820][ T5983] [ 1981.956753][ T5983] dump_stack_lvl+0x125/0x1b0 [ 1981.961436][ T5983] should_fail_ex+0x496/0x5b0 [ 1981.966121][ T5983] should_failslab+0x9/0x20 [ 1981.970616][ T5983] __kmem_cache_alloc_node+0x6b/0x310 [ 1981.975977][ T5983] ? vma_node_allow+0x56/0x300 [ 1981.980734][ T5983] ? drm_gem_handle_create_tail+0x1c6/0x540 [ 1981.986616][ T5983] kmalloc_trace+0x25/0x60 [ 1981.991023][ T5983] vma_node_allow+0x56/0x300 [ 1981.995606][ T5983] drm_gem_handle_create_tail+0x222/0x540 [ 1982.001324][ T5983] drm_gem_shmem_dumb_create+0x21a/0x310 [ 1982.006949][ T5983] drm_mode_create_dumb_ioctl+0x268/0x2f0 [ 1982.012660][ T5983] drm_ioctl_kernel+0x28c/0x4d0 [ 1982.017500][ T5983] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1982.022858][ T5983] ? drm_setversion+0x870/0x870 [ 1982.027706][ T5983] drm_ioctl+0x5cb/0xbf0 [ 1982.031938][ T5983] ? drm_mode_create_dumb+0x2f0/0x2f0 [ 1982.037302][ T5983] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1982.042311][ T5983] ? reacquire_held_locks+0x4c0/0x4c0 [ 1982.047681][ T5983] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1982.052614][ T5983] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1982.057634][ T5983] __x64_sys_ioctl+0x18f/0x210 [ 1982.062390][ T5983] do_syscall_64+0x40/0x110 [ 1982.066886][ T5983] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1982.072762][ T5983] RIP: 0033:0x7f705327cce9 [ 1982.077157][ T5983] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1982.096749][ T5983] RSP: 002b:00007f705408f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.105145][ T5983] RAX: ffffffffffffffda RBX: 00007f705339bf80 RCX: 00007f705327cce9 [ 1982.113105][ T5983] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1982.121061][ T5983] RBP: 00007f705408f120 R08: 0000000000000000 R09: 0000000000000000 [ 1982.129018][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 20:47:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x1, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000700)={0x1, r4, 0x3, 0x7, 0x10001, 0x0, 0x6}) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x2, 0x7, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000004c0), 0x1, 0x408000) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) bind$bt_hci(r6, &(0x7f00000006c0)={0x1f, 0x1}, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0x40086203, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000600)={0x0, r2, r3, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000640)={r10, 0x10001, 0x7, 0x400, 0x1, [], [0x0, 0x3, 0x12397ded, 0x6], [0x800, 0x0, 0x7487, 0x1000], [0x8000000000000001, 0x8000000000000001, 0x80, 0x8001]}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x1, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) (async) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000700)={0x1, r4, 0x3, 0x7, 0x10001, 0x0, 0x6}) (async) sendfile(r6, r6, &(0x7f0000000040)=0x3f00, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x2, 0x7, 0x4}) (async) syz_open_dev$dri(&(0x7f00000004c0), 0x1, 0x408000) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5}) (async) bind$bt_hci(r6, &(0x7f00000006c0)={0x1f, 0x1}, 0x6) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0x40086203, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000600)={0x0, r2, r3, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000640)={r10, 0x10001, 0x7, 0x400, 0x1, [], [0x0, 0x3, 0x12397ded, 0x6], [0x800, 0x0, 0x7487, 0x1000], [0x8000000000000001, 0x8000000000000001, 0x80, 0x8001]}) (async) 20:47:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8bb2}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/146}) [ 1982.136971][ T5983] R13: 000000000000000b R14: 00007f705339bf80 R15: 00007ffd5d4cda38 [ 1982.144935][ T5983] [ 1982.149808][ T5967] EXT4-fs error (device loop2): __ext4_get_inode_loc:4386: comm syz-executor.2: Invalid inode table block 1 in block_group 0 20:47:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x101, 0x101}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) (fail_nth: 16) [ 1982.240558][ T5993] FAULT_INJECTION: forcing a failure. [ 1982.240558][ T5993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1982.275468][ T5967] EXT4-fs (loop2): get root inode failed [ 1982.278880][ T5982] ------------[ cut here ]------------ [ 1982.285815][ T5967] EXT4-fs (loop2): mount failed [ 1982.286819][ T5982] WARNING: CPU: 0 PID: 5982 at drivers/gpu/drm/drm_prime.c:227 drm_prime_destroy_file_private+0x43/0x60 [ 1982.296520][ T5993] CPU: 1 PID: 5993 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1982.302629][ T5982] Modules linked in: [ 1982.312875][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1982.312887][ T5993] Call Trace: [ 1982.312895][ T5993] [ 1982.312902][ T5993] dump_stack_lvl+0x125/0x1b0 [ 1982.312930][ T5993] should_fail_ex+0x496/0x5b0 [ 1982.316844][ T5982] [ 1982.326825][ T5993] _copy_to_user+0x30/0xb0 [ 1982.326849][ T5993] drm_ioctl+0x5f3/0xbf0 [ 1982.330105][ T5982] CPU: 0 PID: 5982 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1982.333018][ T5993] ? drm_prime_destroy_file_private+0x60/0x60 [ 1982.337677][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1982.342299][ T5993] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1982.344617][ T5982] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 1982.348977][ T5993] ? reacquire_held_locks+0x4c0/0x4c0 [ 1982.349017][ T5993] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1982.353221][ T5982] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 13 f1 93 fc e8 0e f1 93 fc 90 <0f> 0b 90 5b e9 04 f1 93 fc e8 3f 9b ea fc eb d8 66 66 2e 0f 1f 84 [ 1982.363507][ T5993] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 1982.363534][ T5993] __x64_sys_ioctl+0x18f/0x210 [ 1982.363566][ T5993] do_syscall_64+0x40/0x110 [ 1982.363589][ T5993] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1982.363606][ T5993] RIP: 0033:0x7f733b67cce9 [ 1982.363620][ T5993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1982.363635][ T5993] RSP: 002b:00007f733c3e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.363651][ T5993] RAX: ffffffffffffffda RBX: 00007f733b79bf80 RCX: 00007f733b67cce9 [ 1982.363663][ T5993] RDX: 0000000020000280 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1982.363674][ T5993] RBP: 00007f733c3e2120 R08: 0000000000000000 R09: 0000000000000000 [ 1982.363684][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1982.363695][ T5993] R13: 000000000000000b R14: 00007f733b79bf80 R15: 00007ffc17176d08 [ 1982.363715][ T5993] [ 1982.519808][ T5982] RSP: 0018:ffffc900032afd90 EFLAGS: 00010293 [ 1982.526054][ T5982] RAX: 0000000000000000 RBX: ffff88807afef378 RCX: ffffc900032afd60 [ 1982.534055][ T5982] RDX: ffff88807e3e5940 RSI: ffffffff84f380c2 RDI: ffff88807afef408 [ 1982.542086][ T5982] RBP: ffff88807afef000 R08: 0000000000000001 R09: 0000000000000001 [ 1982.550111][ T5982] R10: ffffffff8f193a57 R11: 0000000000000000 R12: ffff88801c596000 [ 1982.558147][ T5982] R13: ffff88807afef2a8 R14: ffff88801c596068 R15: ffff88801c5960a0 [ 1982.566976][ T5982] FS: 000055555664c480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1982.576028][ T5982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1982.582641][ T5982] CR2: 00007f58d4cc66e4 CR3: 000000001fbbb000 CR4: 0000000000350ef0 [ 1982.590678][ T5982] Call Trace: [ 1982.593997][ T5982] [ 1982.596992][ T5982] ? show_regs+0x8f/0xa0 [ 1982.601284][ T5982] ? __warn+0xe6/0x390 [ 1982.605365][ T5982] ? drm_prime_destroy_file_private+0x43/0x60 [ 1982.611510][ T5982] ? report_bug+0x3bc/0x580 [ 1982.616074][ T5982] ? handle_bug+0x3d/0x70 [ 1982.620424][ T5982] ? exc_invalid_op+0x17/0x40 [ 1982.625110][ T5982] ? asm_exc_invalid_op+0x1a/0x20 [ 1982.630195][ T5982] ? drm_prime_destroy_file_private+0x42/0x60 [ 1982.636326][ T5982] ? drm_prime_destroy_file_private+0x43/0x60 [ 1982.642396][ T5982] ? vmw_debugfs_gem_init+0x80/0x80 [ 1982.647650][ T5982] drm_file_free.part.0+0x738/0xb90 [ 1982.652857][ T5982] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 1982.659690][ T5982] drm_close_helper.isra.0+0x180/0x1f0 [ 1982.665945][ T5982] drm_release+0x22a/0x4f0 [ 1982.670384][ T5982] ? drm_lastclose+0x1a0/0x1a0 [ 1982.675157][ T5982] __fput+0x270/0xb70 [ 1982.679367][ T5982] __fput_sync+0x47/0x50 [ 1982.683625][ T5982] __x64_sys_close+0x87/0xf0 [ 1982.688462][ T5982] do_syscall_64+0x40/0x110 [ 1982.692979][ T5982] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1982.698925][ T5982] RIP: 0033:0x7f705327bbda [ 1982.703339][ T5982] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 1982.723058][ T5982] RSP: 002b:00007ffd5d4cdb00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1982.731517][ T5982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f705327bbda [ 1982.739536][ T5982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1982.747570][ T5982] RBP: 00007f705339d980 R08: 0000001b32620000 R09: 00000000000002b7 [ 1982.755549][ T5982] R10: 00000000816a3507 R11: 0000000000000293 R12: 00000000001e401a [ 1982.763587][ T5982] R13: ffffffffffffffff R14: 00007f7052e00000 R15: 00000000001e3cd9 [ 1982.772335][ T5982] [ 1982.775361][ T5982] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1982.782635][ T5982] CPU: 0 PID: 5982 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00248-g5254c0cbc92d #0 [ 1982.792949][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1982.802981][ T5982] Call Trace: [ 1982.806239][ T5982] [ 1982.809164][ T5982] dump_stack_lvl+0xd9/0x1b0 [ 1982.813757][ T5982] panic+0x6dc/0x790 [ 1982.817637][ T5982] ? panic_smp_self_stop+0xa0/0xa0 [ 1982.822730][ T5982] ? show_trace_log_lvl+0x363/0x4f0 [ 1982.827923][ T5982] ? check_panic_on_warn+0x1f/0xb0 [ 1982.833029][ T5982] ? drm_prime_destroy_file_private+0x43/0x60 [ 1982.839074][ T5982] check_panic_on_warn+0xab/0xb0 [ 1982.843993][ T5982] __warn+0xf2/0x390 [ 1982.847868][ T5982] ? drm_prime_destroy_file_private+0x43/0x60 [ 1982.853916][ T5982] report_bug+0x3bc/0x580 [ 1982.858228][ T5982] handle_bug+0x3d/0x70 [ 1982.862366][ T5982] exc_invalid_op+0x17/0x40 [ 1982.866851][ T5982] asm_exc_invalid_op+0x1a/0x20 [ 1982.871693][ T5982] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 1982.878375][ T5982] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 13 f1 93 fc e8 0e f1 93 fc 90 <0f> 0b 90 5b e9 04 f1 93 fc e8 3f 9b ea fc eb d8 66 66 2e 0f 1f 84 [ 1982.897968][ T5982] RSP: 0018:ffffc900032afd90 EFLAGS: 00010293 [ 1982.904017][ T5982] RAX: 0000000000000000 RBX: ffff88807afef378 RCX: ffffc900032afd60 [ 1982.911971][ T5982] RDX: ffff88807e3e5940 RSI: ffffffff84f380c2 RDI: ffff88807afef408 [ 1982.919925][ T5982] RBP: ffff88807afef000 R08: 0000000000000001 R09: 0000000000000001 [ 1982.927880][ T5982] R10: ffffffff8f193a57 R11: 0000000000000000 R12: ffff88801c596000 [ 1982.935835][ T5982] R13: ffff88807afef2a8 R14: ffff88801c596068 R15: ffff88801c5960a0 [ 1982.943791][ T5982] ? drm_prime_destroy_file_private+0x42/0x60 [ 1982.949846][ T5982] ? vmw_debugfs_gem_init+0x80/0x80 [ 1982.955031][ T5982] drm_file_free.part.0+0x738/0xb90 [ 1982.960212][ T5982] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 1982.966970][ T5982] drm_close_helper.isra.0+0x180/0x1f0 [ 1982.972419][ T5982] drm_release+0x22a/0x4f0 [ 1982.976825][ T5982] ? drm_lastclose+0x1a0/0x1a0 [ 1982.981572][ T5982] __fput+0x270/0xb70 [ 1982.985540][ T5982] __fput_sync+0x47/0x50 [ 1982.989768][ T5982] __x64_sys_close+0x87/0xf0 [ 1982.994346][ T5982] do_syscall_64+0x40/0x110 [ 1982.998836][ T5982] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1983.004712][ T5982] RIP: 0033:0x7f705327bbda [ 1983.009110][ T5982] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 1983.028706][ T5982] RSP: 002b:00007ffd5d4cdb00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1983.037103][ T5982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f705327bbda [ 1983.045055][ T5982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1983.053011][ T5982] RBP: 00007f705339d980 R08: 0000001b32620000 R09: 00000000000002b7 [ 1983.060970][ T5982] R10: 00000000816a3507 R11: 0000000000000293 R12: 00000000001e401a [ 1983.068929][ T5982] R13: ffffffffffffffff R14: 00007f7052e00000 R15: 00000000001e3cd9 [ 1983.076893][ T5982] [ 1983.080578][ T5982] Kernel Offset: disabled [ 1983.084884][ T5982] Rebooting in 86400 seconds..