$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:12 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000fff40000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1866.800402][T21365] IPVS: ftp: loaded support on port[0] = 21 08:33:12 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1866.892504][T21364] EXT4-fs (loop3): #blocks per group too big: 251674624 08:33:12 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(0x0, 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1867.087833][T21375] IPVS: ftp: loaded support on port[0] = 21 08:33:12 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000c00000010080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1867.225605][ T25] kauditd_printk_skb: 15 callbacks suppressed [ 1867.225622][ T25] audit: type=1804 audit(1575534792.810:9784): pid=21339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir887861196/syzkaller.9iPl6m/1097/bus" dev="sda1" ino=16723 res=1 [ 1867.334459][T21384] EXT4-fs (loop3): #blocks per group too big: 3221241856 [ 1867.467658][T21390] IPVS: ftp: loaded support on port[0] = 21 08:33:13 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:13 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040003fffffff0080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:13 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:13 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:13 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r3, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1867.770949][T21400] IPVS: ftp: loaded support on port[0] = 21 [ 1867.922330][T21404] EXT4-fs (loop3): #blocks per group too big: 1056980992 [ 1868.006145][T21418] IPVS: ftp: loaded support on port[0] = 21 [ 1868.057741][T21421] IPVS: ftp: loaded support on port[0] = 21 08:33:13 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(0x0, 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:13 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000009000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1868.326391][T21431] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1868.337981][T21431] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1868.354177][T21431] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1868.364685][T21431] EXT4-fs (loop3): group descriptors corrupted! 08:33:14 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1868.428969][T21436] IPVS: ftp: loaded support on port[0] = 21 08:33:14 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:14 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000001e000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:14 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r3, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:14 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1868.963778][T21452] IPVS: ftp: loaded support on port[0] = 21 [ 1869.007092][T21456] IPVS: ftp: loaded support on port[0] = 21 08:33:14 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1869.194494][T21463] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1869.210427][T21463] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1869.230084][T21468] IPVS: ftp: loaded support on port[0] = 21 [ 1869.244292][T21463] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1869.275878][T21463] EXT4-fs (loop3): group descriptors corrupted! [ 1869.378205][T21473] IPVS: ftp: loaded support on port[0] = 21 08:33:15 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000020000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r3, @ANYBLOB="0000ffff0000ffff000000000c0001006772656400000000040002"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1869.722837][T21481] IPVS: ftp: loaded support on port[0] = 21 08:33:15 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:15 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r3, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:15 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1870.121911][T21492] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1870.145647][T21500] IPVS: ftp: loaded support on port[0] = 21 [ 1870.198704][T21492] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1870.223397][T21492] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:15 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1870.249374][T21492] EXT4-fs (loop3): group descriptors corrupted! [ 1870.288870][T21506] IPVS: ftp: loaded support on port[0] = 21 [ 1870.352354][T21510] IPVS: ftp: loaded support on port[0] = 21 08:33:16 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000033000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:16 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1870.586464][T21519] IPVS: ftp: loaded support on port[0] = 21 [ 1870.836352][T21524] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1870.849377][T21524] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1870.867770][T21524] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1870.878617][T21524] EXT4-fs (loop3): group descriptors corrupted! [ 1870.985865][T21531] IPVS: ftp: loaded support on port[0] = 21 08:33:16 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:16 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:16 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:16 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000034000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:16 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1871.494331][T21554] IPVS: ftp: loaded support on port[0] = 21 [ 1871.587692][T21561] IPVS: ftp: loaded support on port[0] = 21 [ 1871.642302][T21562] IPVS: ftp: loaded support on port[0] = 21 [ 1871.660745][T21551] IPVS: ftp: loaded support on port[0] = 21 [ 1871.754022][T21549] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1871.782191][T21549] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1871.818687][T21549] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1871.834313][T21549] EXT4-fs (loop3): group descriptors corrupted! 08:33:17 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:17 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000035000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:17 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1872.196442][T21579] IPVS: ftp: loaded support on port[0] = 21 08:33:17 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:18 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1872.419791][T21576] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 08:33:18 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(0x0, 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1872.470283][T21576] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1872.488043][T21588] IPVS: ftp: loaded support on port[0] = 21 [ 1872.572550][T21576] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1872.588683][T21576] EXT4-fs (loop3): group descriptors corrupted! [ 1872.710903][T21600] IPVS: ftp: loaded support on port[0] = 21 [ 1872.779908][T21603] IPVS: ftp: loaded support on port[0] = 21 08:33:18 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:18 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000003f000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1873.024157][ T25] audit: type=1804 audit(1575534798.600:9785): pid=21606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/614/bus" dev="sda1" ino=17489 res=1 08:33:18 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1873.136168][ T25] audit: type=1804 audit(1575534798.640:9786): pid=21598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/614/bus" dev="sda1" ino=17489 res=1 [ 1873.165688][T21611] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1873.197217][T21611] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1873.286069][T21616] IPVS: ftp: loaded support on port[0] = 21 [ 1873.327964][T21611] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:19 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1873.379169][T21611] EXT4-fs (loop3): group descriptors corrupted! [ 1873.391482][ T25] audit: type=1804 audit(1575534798.770:9787): pid=21606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/614/bus" dev="sda1" ino=17489 res=1 [ 1873.504392][ T25] audit: type=1804 audit(1575534799.000:9788): pid=21598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/614/bus" dev="sda1" ino=17489 res=1 08:33:19 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(0x0, 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:19 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1873.605203][T21625] IPVS: ftp: loaded support on port[0] = 21 08:33:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(0x0, 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:19 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000240000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1873.831465][T21638] IPVS: ftp: loaded support on port[0] = 21 [ 1873.861691][T21639] IPVS: ftp: loaded support on port[0] = 21 [ 1873.994971][T21635] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1874.005393][T21635] CPU: 1 PID: 21635 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1874.013725][T21635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1874.023849][T21635] Call Trace: [ 1874.027197][T21635] dump_stack+0x11d/0x181 [ 1874.031813][T21635] dump_header+0xaa/0x449 [ 1874.036157][T21635] oom_kill_process.cold+0x10/0x15 [ 1874.041364][T21635] out_of_memory+0x231/0xa00 [ 1874.045979][T21635] mem_cgroup_out_of_memory+0x128/0x150 [ 1874.051616][T21635] try_charge+0xb5c/0xbe0 [ 1874.055970][T21635] ? __rcu_read_unlock+0x10/0x3c0 [ 1874.061046][T21635] mem_cgroup_try_charge+0xd2/0x260 [ 1874.066297][T21635] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1874.071986][T21635] wp_page_copy+0x322/0x1120 [ 1874.076649][T21635] ? apic_timer_interrupt+0xa/0x20 [ 1874.081882][T21635] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1874.087646][T21635] do_wp_page+0x192/0x11f0 [ 1874.092128][T21635] __handle_mm_fault+0x1ab1/0x2c70 [ 1874.097306][T21635] handle_mm_fault+0x21b/0x530 [ 1874.102110][T21635] __do_page_fault+0x456/0x8d0 [ 1874.107018][T21635] do_page_fault+0x38/0x194 [ 1874.111546][T21635] page_fault+0x34/0x40 [ 1874.115718][T21635] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1874.122741][T21635] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1874.142358][T21635] RSP: 0018:ffffc9000b0dbbc0 EFLAGS: 00010206 [ 1874.148439][T21635] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1874.156429][T21635] RDX: 0000000000001000 RSI: ffff888073101b00 RDI: 00000000206fa000 [ 1874.164503][T21635] RBP: ffffc9000b0dbbf8 R08: ffff888059a400c0 R09: 0000888059a40bd8 [ 1874.172493][T21635] R10: 0000000000000000 R11: 0000888059a40bdf R12: 00000000206f9500 [ 1874.180500][T21635] R13: 00000000206fa500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1874.188541][T21635] ? copyout+0xa5/0xb0 [ 1874.192679][T21635] copy_page_to_iter+0x254/0x8b0 [ 1874.197661][T21635] pipe_to_user+0x71/0xc0 [ 1874.202145][T21635] __splice_from_pipe+0x248/0x480 [ 1874.207183][T21635] ? iter_to_pipe+0x3f0/0x3f0 [ 1874.211921][T21635] do_vmsplice.part.0+0x1c5/0x210 [ 1874.216993][T21635] __do_sys_vmsplice+0x15f/0x1c0 [ 1874.222076][T21635] ? __read_once_size+0x5a/0xe0 [ 1874.226938][T21635] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1874.232677][T21635] ? _copy_to_user+0x84/0xb0 [ 1874.237295][T21635] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1874.243634][T21635] ? put_timespec64+0x94/0xc0 [ 1874.248436][T21635] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1874.254708][T21635] __x64_sys_vmsplice+0x5e/0x80 [ 1874.259741][T21635] do_syscall_64+0xcc/0x370 [ 1874.264256][T21635] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1874.270682][T21635] RIP: 0033:0x45a679 [ 1874.274600][T21635] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1874.294321][T21635] RSP: 002b:00007ffbf6504c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1874.302736][T21635] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1874.310703][T21635] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1874.318679][T21635] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1874.326666][T21635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbf65056d4 [ 1874.334976][T21635] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff 08:33:19 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1874.343392][T21635] memory: usage 307200kB, limit 307200kB, failcnt 752 [ 1874.350177][T21635] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1874.357030][T21635] Memory cgroup stats for /syz1: [ 1874.357240][T21635] anon 293801984 [ 1874.357240][T21635] file 139264 [ 1874.357240][T21635] kernel_stack 1622016 [ 1874.357240][T21635] slab 4460544 [ 1874.357240][T21635] sock 0 [ 1874.357240][T21635] shmem 0 [ 1874.357240][T21635] file_mapped 0 [ 1874.357240][T21635] file_dirty 0 [ 1874.357240][T21635] file_writeback 0 [ 1874.357240][T21635] anon_thp 278921216 [ 1874.357240][T21635] inactive_anon 69632 [ 1874.357240][T21635] active_anon 293801984 [ 1874.357240][T21635] inactive_file 0 [ 1874.357240][T21635] active_file 98304 [ 1874.357240][T21635] unevictable 131072 [ 1874.357240][T21635] slab_reclaimable 1081344 [ 1874.357240][T21635] slab_unreclaimable 3379200 [ 1874.357240][T21635] pgfault 129690 [ 1874.357240][T21635] pgmajfault 0 [ 1874.357240][T21635] workingset_refault 0 [ 1874.357240][T21635] workingset_activate 0 [ 1874.357240][T21635] workingset_nodereclaim 0 [ 1874.357240][T21635] pgrefill 743 [ 1874.357240][T21635] pgscan 735 [ 1874.357240][T21635] pgsteal 90 [ 1874.451265][T21635] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18410,uid=0 [ 1874.466898][T21635] Memory cgroup out of memory: Killed process 18410 (syz-executor.1) total-vm:73108kB, anon-rss:14516kB, file-rss:35820kB, shmem-rss:0kB, UID:0 pgtables:155648kB oom_score_adj:1000 [ 1874.509513][ T25] audit: type=1804 audit(1575534800.100:9789): pid=21652 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/615/bus" dev="sda1" ino=16680 res=1 08:33:20 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1874.537450][ T25] audit: type=1804 audit(1575534800.120:9790): pid=21654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/615/bus" dev="sda1" ino=16680 res=1 [ 1874.606318][ T25] audit: type=1804 audit(1575534800.120:9791): pid=21649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/615/bus" dev="sda1" ino=16680 res=1 [ 1874.624162][T21647] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 08:33:20 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1874.706356][T21647] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1874.732885][T21647] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:20 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1874.759881][T21647] EXT4-fs (loop3): group descriptors corrupted! [ 1874.769673][T21665] IPVS: ftp: loaded support on port[0] = 21 [ 1874.773196][T21664] IPVS: ftp: loaded support on port[0] = 21 08:33:20 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(0x0, 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1874.996901][T21677] IPVS: ftp: loaded support on port[0] = 21 [ 1874.999270][T21678] IPVS: ftp: loaded support on port[0] = 21 08:33:20 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000340000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1875.106423][ T25] audit: type=1804 audit(1575534800.690:9792): pid=21649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/615/bus" dev="sda1" ino=16680 res=1 [ 1875.317252][ T25] audit: type=1804 audit(1575534800.900:9793): pid=21648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/615/bus" dev="sda1" ino=16680 res=1 08:33:21 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1875.413947][T21686] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1875.436471][T21686] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1875.479352][T21686] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:21 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1875.522052][T21686] EXT4-fs (loop3): group descriptors corrupted! 08:33:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(0x0, 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1875.691646][T21697] IPVS: ftp: loaded support on port[0] = 21 08:33:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x10000000000000e4) readv(r0, &(0x7f0000000580), 0x3c1) 08:33:21 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000440000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1875.860065][T21705] IPVS: ftp: loaded support on port[0] = 21 08:33:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x10003) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x100000000000011, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f000000cc80)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x87ffd) sendfile(r1, r3, 0x0, 0x800000000021) 08:33:21 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1876.212302][T21713] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1876.223571][T21713] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1876.233642][T21713] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1876.243837][T21713] EXT4-fs (loop3): group descriptors corrupted! [ 1876.306510][ T25] audit: type=1804 audit(1575534801.890:9794): pid=21683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir887861196/syzkaller.9iPl6m/1104/bus" dev="sda1" ino=16754 res=1 08:33:22 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000540000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:22 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x18, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x1000040) shutdown(r0, 0x2) 08:33:22 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1876.671072][T21730] IPVS: ftp: loaded support on port[0] = 21 [ 1876.821028][T21729] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1876.838684][T21729] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1876.848696][T21729] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1876.869693][T21741] IPVS: ftp: loaded support on port[0] = 21 [ 1876.909098][T21729] EXT4-fs (loop3): group descriptors corrupted! 08:33:22 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffa, 0x101040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x0, 0x4, 0x7f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000004c0)={{0xa, 0x4e20, 0x200, @mcast2, 0x9}, {0xa, 0x4e21, 0x7fffffff, @loopback, 0x120e}, 0x100, [0x100, 0xf7e, 0x3, 0x6, 0x800, 0x2, 0x56800000]}, 0x5c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x20000000}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 08:33:22 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0) socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) r0 = open(&(0x7f0000000900)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fbf) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) 08:33:22 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000640000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:22 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000005fc0)='system.posix_acl_access\x00', &(0x7f00000060c0)={{}, {}, [], {}, [{}, {}, {0x8, 0x0, 0xee01}, {}]}, 0x44, 0x0) 08:33:22 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1877.388626][T21752] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1877.407009][T21752] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1877.463272][T21752] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x48}}, 0x0) 08:33:23 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0) socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) r0 = open(&(0x7f0000000900)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fbf) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 1877.513343][T21752] EXT4-fs (loop3): group descriptors corrupted! 08:33:23 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1877.730567][T21781] IPVS: ftp: loaded support on port[0] = 21 08:33:23 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000740000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1877.819441][T21787] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 08:33:23 executing program 4: [ 1877.897006][T21782] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 08:33:23 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0) socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) r0 = open(&(0x7f0000000900)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fbf) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) 08:33:23 executing program 4: [ 1877.982719][T21797] IPVS: ftp: loaded support on port[0] = 21 08:33:23 executing program 0: 08:33:23 executing program 4: [ 1878.186820][T21802] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1878.243251][T21802] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1878.281759][T21802] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:23 executing program 0: [ 1878.310839][T21802] EXT4-fs (loop3): group descriptors corrupted! 08:33:23 executing program 4: 08:33:24 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:24 executing program 0: 08:33:24 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000840000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:24 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:24 executing program 4: 08:33:24 executing program 1: 08:33:24 executing program 0: [ 1878.806846][T21836] IPVS: ftp: loaded support on port[0] = 21 08:33:24 executing program 4: [ 1878.899227][T21832] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1878.916022][T21832] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1878.949351][T21832] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1878.988851][T21832] EXT4-fs (loop3): group descriptors corrupted! 08:33:24 executing program 1: 08:33:24 executing program 0: [ 1879.001695][T21846] IPVS: ftp: loaded support on port[0] = 21 08:33:24 executing program 4: 08:33:24 executing program 1: 08:33:25 executing program 0: 08:33:25 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000940000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:25 executing program 1: [ 1879.536507][T21863] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1879.548319][T21863] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1879.564845][T21863] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1879.575445][T21863] EXT4-fs (loop3): group descriptors corrupted! 08:33:25 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:25 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:25 executing program 4: 08:33:25 executing program 1: 08:33:25 executing program 0: 08:33:25 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000a40000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:25 executing program 4: 08:33:25 executing program 0: 08:33:25 executing program 1: [ 1879.897580][T21878] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1879.950521][T21887] IPVS: ftp: loaded support on port[0] = 21 [ 1879.963703][T21878] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1879.996573][T21892] IPVS: ftp: loaded support on port[0] = 21 08:33:25 executing program 4: [ 1880.039047][T21878] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1880.086650][T21878] EXT4-fs (loop3): group descriptors corrupted! 08:33:25 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r1, r5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 08:33:25 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a2", 0x40, 0x9}], 0x0, 0x0) r0 = gettid() rt_tgsigqueueinfo(r0, 0x0, 0x4, &(0x7f0000000200)={0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340)}, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x100800) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) write$P9_RLERROR(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="09010005006eef64657600000000586be67b50fdf482553349913d4b96"], 0xe) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_TSC(0x1a, 0x3) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() openat(0xffffffffffffffff, 0x0, 0x48000, 0x10) tkill(r2, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0xe08efac7e3997bd8, 0x0) r3 = creat(&(0x7f0000000840)='./file1\x00', 0x24) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) openat$cgroup_ro(r3, &(0x7f0000000780)='pids.current\x00', 0x0, 0x0) creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)) creat(&(0x7f0000000840)='./file1\x00', 0x0) dup2(r3, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000880)) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x400}], 0x4801, 0x0) 08:33:26 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:26 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0xfffffffffffffcfa) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8) getsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000006, &(0x7f0000000200), &(0x7f0000000240)=0x4) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe) 08:33:26 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000002340000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:26 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:26 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r1, r5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 08:33:26 executing program 4: r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000580)) sched_getattr(0x0, &(0x7f00000000c0)={0x30}, 0x30, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) pipe(0x0) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x0, 0x6, {{0x0, 0xffff}}}, 0x28) [ 1880.853145][T21915] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1880.864953][T21915] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1880.878237][T21915] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1880.896191][T21915] EXT4-fs (loop3): group descriptors corrupted! [ 1880.930519][T21934] IPVS: ftp: loaded support on port[0] = 21 [ 1880.958183][T21935] IPVS: ftp: loaded support on port[0] = 21 08:33:26 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:27 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000004840000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1881.665661][T21964] IPVS: ftp: loaded support on port[0] = 21 08:33:27 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1881.821958][T21962] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1881.861946][T21962] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:33:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r3, @ANYBLOB="0000ffff0000ffff000000000c0001006772656400"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 08:33:27 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(0x0, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:27 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1881.902208][T21962] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1881.917488][T21962] EXT4-fs (loop3): group descriptors corrupted! 08:33:27 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000004c40000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(0x0, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1882.183274][T21988] IPVS: ftp: loaded support on port[0] = 21 [ 1882.242943][T21993] IPVS: ftp: loaded support on port[0] = 21 08:33:27 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1882.396951][T21998] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1882.455931][T21998] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1882.479559][T21998] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1882.510418][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 1882.510460][ T25] audit: type=1804 audit(1575534808.100:9803): pid=22004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1555/bus" dev="sda1" ino=16605 res=1 [ 1882.526400][T21998] EXT4-fs (loop3): group descriptors corrupted! [ 1882.582529][ T25] audit: type=1804 audit(1575534808.090:9802): pid=21983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/628/bus" dev="sda1" ino=17281 res=1 [ 1882.611897][ T25] audit: type=1804 audit(1575534808.170:9804): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1555/bus" dev="sda1" ino=16605 res=1 [ 1882.695010][ T25] audit: type=1804 audit(1575534808.270:9805): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1555/bus" dev="sda1" ino=16605 res=1 [ 1882.708523][T22009] IPVS: ftp: loaded support on port[0] = 21 08:33:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(0x0, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:28 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000006040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:28 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1883.018721][ T25] audit: type=1804 audit(1575534808.600:9806): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1555/bus" dev="sda1" ino=16605 res=1 08:33:28 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1883.197960][ T25] audit: type=1804 audit(1575534808.780:9807): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1555/bus" dev="sda1" ino=16605 res=1 [ 1883.246077][T22025] IPVS: ftp: loaded support on port[0] = 21 [ 1883.302318][ T25] audit: type=1804 audit(1575534808.880:9808): pid=21983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/628/bus" dev="sda1" ino=17281 res=1 08:33:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(0x0, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1883.416816][T22023] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1883.466941][ T25] audit: type=1804 audit(1575534809.050:9809): pid=21983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/628/bus" dev="sda1" ino=17281 res=1 [ 1883.523911][T22023] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1883.540891][T22035] IPVS: ftp: loaded support on port[0] = 21 [ 1883.547892][ T25] audit: type=1804 audit(1575534809.080:9810): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir887861196/syzkaller.9iPl6m/1121/bus" dev="sda1" ino=16943 res=1 [ 1883.620575][T22023] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1883.673417][ T25] audit: type=1804 audit(1575534809.260:9811): pid=21983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/628/bus" dev="sda1" ino=17281 res=1 [ 1883.706028][T22023] EXT4-fs (loop3): group descriptors corrupted! 08:33:29 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000006840000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:29 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:29 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1884.172396][T22045] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1884.241878][T22045] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1884.294008][T22057] IPVS: ftp: loaded support on port[0] = 21 [ 1884.307096][T22058] IPVS: ftp: loaded support on port[0] = 21 08:33:29 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1884.359040][T22045] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f0000000300)=0x6) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r9, 0x0) dup2(r9, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1884.456738][T22045] EXT4-fs (loop3): group descriptors corrupted! 08:33:30 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000006c40000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1884.668373][T22073] IPVS: ftp: loaded support on port[0] = 21 08:33:30 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(0x0, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1884.892276][T22080] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1884.923166][T22080] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:33:30 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000006840000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:30 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1884.941963][T22080] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1884.975541][T22080] EXT4-fs (loop3): group descriptors corrupted! 08:33:30 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000007440000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1885.198069][T22087] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1885.228837][T22087] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1885.256415][T22087] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1885.275765][T22098] IPVS: ftp: loaded support on port[0] = 21 [ 1885.284191][T22094] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1885.300667][T22087] EXT4-fs (loop0): group descriptors corrupted! [ 1885.307104][T22094] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1885.322733][T22094] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1885.347545][T22094] EXT4-fs (loop3): group descriptors corrupted! 08:33:31 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:31 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1885.718931][T22113] IPVS: ftp: loaded support on port[0] = 21 08:33:31 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000007a40000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1885.984609][T22117] IPVS: ftp: loaded support on port[0] = 21 08:33:31 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1886.097693][T22124] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1886.180046][T22124] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:33:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1886.246852][T22124] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1886.335390][T22134] IPVS: ftp: loaded support on port[0] = 21 [ 1886.365191][T22124] EXT4-fs (loop3): group descriptors corrupted! 08:33:32 executing program 1: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000020004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:32 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000005d000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 08:33:32 executing program 4: timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(0x0, 0x95) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1886.794372][T22145] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1886.807038][T22145] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1886.837674][T22145] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1886.892590][T22145] EXT4-fs (loop3): group descriptors corrupted! [ 1886.927107][T22152] IPVS: ftp: loaded support on port[0] = 21 08:33:32 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000007a000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:32 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:32 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1887.424956][T22165] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1887.474177][T22170] IPVS: ftp: loaded support on port[0] = 21 [ 1887.497438][T22165] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1887.583909][T22165] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1887.651630][T22165] EXT4-fs (loop3): group descriptors corrupted! [ 1887.859147][ T25] kauditd_printk_skb: 17 callbacks suppressed [ 1887.859167][ T25] audit: type=1804 audit(1575534813.440:9829): pid=22173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir887861196/syzkaller.9iPl6m/1125/bus" dev="sda1" ino=16932 res=1 [ 1887.936154][ T25] audit: type=1804 audit(1575534813.450:9830): pid=22173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir887861196/syzkaller.9iPl6m/1125/bus" dev="sda1" ino=16932 res=1 [ 1887.988558][ T25] audit: type=1804 audit(1575534813.520:9831): pid=22163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir887861196/syzkaller.9iPl6m/1125/bus" dev="sda1" ino=16932 res=1 [ 1888.046842][ T25] audit: type=1804 audit(1575534813.610:9832): pid=22163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir887861196/syzkaller.9iPl6m/1125/bus" dev="sda1" ino=16932 res=1 [ 1888.192368][ T25] audit: type=1804 audit(1575534813.770:9833): pid=22163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir887861196/syzkaller.9iPl6m/1125/bus" dev="sda1" ino=16932 res=1 08:33:34 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:34 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000ff000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:34 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:34 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1888.909414][T22186] IPVS: ftp: loaded support on port[0] = 21 08:33:34 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:34 executing program 4: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000007a000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1889.215762][T22194] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1889.282220][T22205] IPVS: ftp: loaded support on port[0] = 21 [ 1889.340860][T22195] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1889.433228][T22194] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1889.445139][T22195] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1889.482015][T22213] IPVS: ftp: loaded support on port[0] = 21 [ 1889.488834][T22194] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1889.583743][T22195] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1889.595851][T22194] EXT4-fs (loop3): group descriptors corrupted! [ 1889.616002][T22195] EXT4-fs (loop4): group descriptors corrupted! 08:33:35 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:35 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:35 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000ffffff3f80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1890.005514][T22230] IPVS: ftp: loaded support on port[0] = 21 08:33:35 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000ff000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:35 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1890.374773][T22235] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1890.388719][T22235] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1890.448953][T22235] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1890.459556][T22236] IPVS: ftp: loaded support on port[0] = 21 [ 1890.478245][T22235] EXT4-fs (loop3): group descriptors corrupted! [ 1890.578845][T22244] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 08:33:36 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000010000c080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1890.629527][T22244] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1890.669120][T22244] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:36 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1890.712340][T22244] EXT4-fs (loop0): group descriptors corrupted! 08:33:36 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1890.918411][T22253] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1890.949235][ T25] audit: type=1804 audit(1575534816.540:9834): pid=22252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1561/bus" dev="sda1" ino=16943 res=1 [ 1891.020412][T22253] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1891.042150][T22253] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1891.071076][T22253] EXT4-fs (loop3): group descriptors corrupted! [ 1891.094491][T22265] IPVS: ftp: loaded support on port[0] = 21 08:33:36 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1891.270183][T22270] IPVS: ftp: loaded support on port[0] = 21 08:33:37 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000002000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1891.549379][ T25] audit: type=1804 audit(1575534817.130:9835): pid=22247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1561/bus" dev="sda1" ino=16943 res=1 [ 1891.604415][T22283] IPVS: ftp: loaded support on port[0] = 21 08:33:37 executing program 5: timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1891.776124][T22286] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1891.791305][T22286] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1891.802202][T22286] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1891.813030][T22286] EXT4-fs (loop3): group descriptors corrupted! [ 1891.838709][ T25] audit: type=1804 audit(1575534817.420:9836): pid=22247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1561/bus" dev="sda1" ino=16943 res=1 08:33:37 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:37 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000009000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1891.974198][ T25] audit: type=1804 audit(1575534817.560:9837): pid=22247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1561/bus" dev="sda1" ino=16943 res=1 [ 1892.115852][T22297] IPVS: ftp: loaded support on port[0] = 21 [ 1892.346483][ T25] audit: type=1804 audit(1575534817.930:9838): pid=22247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1561/bus" dev="sda1" ino=16943 res=1 [ 1892.470165][T22309] IPVS: ftp: loaded support on port[0] = 21 [ 1892.604242][T22306] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1892.643703][T22306] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1892.655602][T22306] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1892.670930][T22306] EXT4-fs (loop3): group descriptors corrupted! 08:33:39 executing program 4: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000800004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:39 executing program 5: timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:39 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:39 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000001e000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:39 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:39 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1894.133740][T22346] IPVS: ftp: loaded support on port[0] = 21 [ 1894.156701][T22348] IPVS: ftp: loaded support on port[0] = 21 [ 1894.190338][T22347] IPVS: ftp: loaded support on port[0] = 21 [ 1894.233785][T22350] IPVS: ftp: loaded support on port[0] = 21 [ 1894.384064][T22332] EXT4-fs (loop4): Invalid log cluster size: 524289 [ 1894.437124][T22328] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1894.469212][T22328] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1894.492541][T22328] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1894.536139][T22328] EXT4-fs (loop3): group descriptors corrupted! 08:33:40 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000033000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:40 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:40 executing program 5: timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:40 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1895.221995][T22384] IPVS: ftp: loaded support on port[0] = 21 [ 1895.330581][T22388] IPVS: ftp: loaded support on port[0] = 21 [ 1895.421297][T22379] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1895.515918][T22379] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1895.575985][T22379] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1895.618833][T22379] EXT4-fs (loop3): group descriptors corrupted! 08:33:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:41 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000034000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1895.839566][ T25] audit: type=1804 audit(1575534821.430:9840): pid=22378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1563/bus" dev="sda1" ino=17618 res=1 [ 1895.943322][ T25] audit: type=1804 audit(1575534821.430:9839): pid=22393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/637/bus" dev="sda1" ino=17617 res=1 08:33:41 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:41 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1896.044818][ T25] audit: type=1804 audit(1575534821.490:9841): pid=22393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/637/bus" dev="sda1" ino=17617 res=1 [ 1896.161472][T22401] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1896.250440][T22401] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1896.306909][T22401] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1896.319029][ T25] audit: type=1804 audit(1575534821.530:9842): pid=22378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1563/bus" dev="sda1" ino=17618 res=1 [ 1896.403457][ T25] audit: type=1804 audit(1575534821.560:9843): pid=22371 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1563/bus" dev="sda1" ino=17618 res=1 [ 1896.421718][T22401] EXT4-fs (loop3): group descriptors corrupted! [ 1896.451960][T22412] IPVS: ftp: loaded support on port[0] = 21 [ 1896.459341][ T25] audit: type=1804 audit(1575534821.560:9844): pid=22378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1563/bus" dev="sda1" ino=17618 res=1 [ 1896.493708][ T25] audit: type=1804 audit(1575534821.620:9845): pid=22377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/637/bus" dev="sda1" ino=17617 res=1 [ 1896.552472][T22416] IPVS: ftp: loaded support on port[0] = 21 08:33:42 executing program 1: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000033000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1896.758390][ T25] audit: type=1804 audit(1575534821.790:9846): pid=22377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/637/bus" dev="sda1" ino=17617 res=1 08:33:42 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000035000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:42 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000034000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1896.891248][ T25] audit: type=1804 audit(1575534821.940:9847): pid=22371 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1563/bus" dev="sda1" ino=17618 res=1 [ 1897.023107][ T25] audit: type=1804 audit(1575534821.980:9848): pid=22398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir887861196/syzkaller.9iPl6m/1130/bus" dev="sda1" ino=16667 res=1 08:33:42 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:42 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1897.165455][T22426] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 08:33:42 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1897.218010][T22426] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1897.267617][T22429] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1897.318504][T22426] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1897.337340][T22429] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1897.397367][T22429] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1897.411674][T22426] EXT4-fs (loop3): group descriptors corrupted! [ 1897.438912][T22429] EXT4-fs (loop0): group descriptors corrupted! [ 1897.567970][T22449] IPVS: ftp: loaded support on port[0] = 21 [ 1897.577472][T22450] IPVS: ftp: loaded support on port[0] = 21 [ 1897.772228][T22458] IPVS: ftp: loaded support on port[0] = 21 08:33:43 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:43 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000005d000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:43 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1898.152649][T22467] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1898.230476][T22478] IPVS: ftp: loaded support on port[0] = 21 08:33:43 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1898.300401][T22467] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:33:44 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:44 executing program 1: timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) mkdir(0x0, 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x95) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1898.366066][T22475] IPVS: ftp: loaded support on port[0] = 21 [ 1898.396767][T22467] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:44 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1898.438878][T22467] EXT4-fs (loop3): group descriptors corrupted! [ 1898.543069][T22487] IPVS: ftp: loaded support on port[0] = 21 [ 1898.650447][T22491] IPVS: ftp: loaded support on port[0] = 21 08:33:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002a00070500"/20, @ANYRES32=r3, @ANYBLOB="0000ffff0000ffff000000000c000100677265640000000004000200"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 08:33:44 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000007a000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1898.987164][T22509] IPVS: ftp: loaded support on port[0] = 21 [ 1899.175912][T22511] IPVS: ftp: loaded support on port[0] = 21 [ 1899.188262][T22506] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 08:33:44 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:44 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1899.249421][T22506] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1899.274779][T22506] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1899.337260][T22506] EXT4-fs (loop3): group descriptors corrupted! 08:33:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 1899.579858][T22529] IPVS: ftp: loaded support on port[0] = 21 08:33:45 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:33:45 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040020080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:45 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1899.977131][T22545] IPVS: ftp: loaded support on port[0] = 21 08:33:45 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:33:45 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1900.276894][T22549] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1900.390943][T22557] IPVS: ftp: loaded support on port[0] = 21 [ 1900.435557][T22564] IPVS: ftp: loaded support on port[0] = 21 [ 1900.507093][T22549] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1900.515904][T22568] IPVS: ftp: loaded support on port[0] = 21 [ 1900.529176][T22549] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1900.575735][T22549] EXT4-fs (loop3): group descriptors corrupted! 08:33:46 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040030080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1900.869032][ T25] kauditd_printk_skb: 12 callbacks suppressed [ 1900.869053][ T25] audit: type=1804 audit(1575534826.450:9861): pid=22523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1568/bus" dev="sda1" ino=16659 res=1 08:33:46 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:46 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1901.071500][ T25] audit: type=1804 audit(1575534826.540:9862): pid=22537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/640/bus" dev="sda1" ino=16703 res=1 08:33:46 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1901.286766][ T25] audit: type=1804 audit(1575534826.810:9863): pid=22523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1568/bus" dev="sda1" ino=16659 res=1 [ 1901.338769][ T25] audit: type=1804 audit(1575534826.870:9864): pid=22537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir729382431/syzkaller.NpazvD/640/bus" dev="sda1" ino=16703 res=1 [ 1901.465242][T22596] IPVS: ftp: loaded support on port[0] = 21 [ 1901.498098][T22578] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1901.518686][T22578] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1901.550323][T22595] IPVS: ftp: loaded support on port[0] = 21 [ 1901.600665][T22578] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1901.666599][T22578] EXT4-fs (loop3): group descriptors corrupted! 08:33:47 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:47 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1901.727139][T22599] IPVS: ftp: loaded support on port[0] = 21 08:33:47 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040040080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1901.990554][T22611] IPVS: ftp: loaded support on port[0] = 21 08:33:47 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:47 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1902.379495][T22616] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1902.470928][T22616] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1902.504276][T22629] IPVS: ftp: loaded support on port[0] = 21 [ 1902.618219][T22632] IPVS: ftp: loaded support on port[0] = 21 08:33:48 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1902.698651][T22616] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1902.732775][T22616] EXT4-fs (loop3): group descriptors corrupted! 08:33:48 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1902.760463][ T25] audit: type=1804 audit(1575534828.350:9865): pid=22612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1569/bus" dev="sda1" ino=16586 res=1 [ 1902.997373][ T25] audit: type=1804 audit(1575534828.580:9866): pid=22609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1569/bus" dev="sda1" ino=16586 res=1 08:33:48 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040050080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1903.087886][T22645] IPVS: ftp: loaded support on port[0] = 21 [ 1903.225880][T22652] IPVS: ftp: loaded support on port[0] = 21 08:33:48 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1903.344627][ T25] audit: type=1804 audit(1575534828.920:9867): pid=22609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1569/bus" dev="sda1" ino=16586 res=1 08:33:49 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1903.496898][T22656] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1903.518751][T22656] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1903.570039][T22663] IPVS: ftp: loaded support on port[0] = 21 [ 1903.720254][ T25] audit: type=1804 audit(1575534829.300:9868): pid=22609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1569/bus" dev="sda1" ino=16586 res=1 [ 1903.768422][T22656] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1903.889699][T22656] EXT4-fs (loop3): group descriptors corrupted! 08:33:49 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1903.968110][T22672] IPVS: ftp: loaded support on port[0] = 21 08:33:49 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1904.183262][ T25] audit: type=1804 audit(1575534829.770:9869): pid=22609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1569/bus" dev="sda1" ino=16586 res=1 [ 1904.483803][T22687] IPVS: ftp: loaded support on port[0] = 21 [ 1904.578810][T22690] IPVS: ftp: loaded support on port[0] = 21 08:33:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) mmap(&(0x7f0000017000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x2b696000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0xcfb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000300)=0x6) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r10, 0x0) dup2(r10, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 08:33:50 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:50 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:50 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040060080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1905.076272][T22712] IPVS: ftp: loaded support on port[0] = 21 [ 1905.107925][T22704] IPVS: ftp: loaded support on port[0] = 21 [ 1905.136461][T22699] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1905.219633][T22699] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1905.255412][T22699] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:50 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1905.307288][T22699] EXT4-fs (loop3): group descriptors corrupted! 08:33:50 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1905.655039][T22729] IPVS: ftp: loaded support on port[0] = 21 08:33:51 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:51 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040070080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:51 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1905.830472][T22728] IPVS: ftp: loaded support on port[0] = 21 [ 1905.843510][ T25] audit: type=1804 audit(1575534831.430:9870): pid=22705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1570/bus" dev="sda1" ino=16547 res=1 08:33:51 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1906.048335][T22744] IPVS: ftp: loaded support on port[0] = 21 [ 1906.240588][T22738] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1906.290183][T22749] IPVS: ftp: loaded support on port[0] = 21 [ 1906.438808][T22738] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1906.486994][T22738] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1906.534978][T22738] EXT4-fs (loop3): group descriptors corrupted! [ 1906.544458][ T25] audit: type=1804 audit(1575534832.120:9871): pid=22705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1570/bus" dev="sda1" ino=16547 res=1 08:33:52 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1906.700420][T22761] IPVS: ftp: loaded support on port[0] = 21 08:33:52 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1906.876715][ T25] audit: type=1804 audit(1575534832.460:9872): pid=22725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1570/bus" dev="sda1" ino=16547 res=1 [ 1907.027987][ T25] audit: type=1804 audit(1575534832.530:9873): pid=22705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1570/bus" dev="sda1" ino=16547 res=1 [ 1907.134265][T22777] IPVS: ftp: loaded support on port[0] = 21 [ 1907.270375][T22779] IPVS: ftp: loaded support on port[0] = 21 [ 1907.283593][ T25] audit: type=1804 audit(1575534832.850:9874): pid=22705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir844901541/syzkaller.VutjwX/1570/bus" dev="sda1" ino=16547 res=1 08:33:53 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:53 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040070080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:53 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040080080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:53 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:53 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1907.651947][T22792] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1907.666560][T22792] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1907.676157][T22787] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1907.677647][T22792] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1907.698791][T22792] EXT4-fs (loop0): group descriptors corrupted! [ 1907.708736][T22787] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1907.811153][T22806] IPVS: ftp: loaded support on port[0] = 21 [ 1907.834808][T22799] IPVS: ftp: loaded support on port[0] = 21 [ 1907.888847][T22787] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:53 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1907.935304][T22787] EXT4-fs (loop3): group descriptors corrupted! 08:33:53 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1908.039171][T22810] IPVS: ftp: loaded support on port[0] = 21 08:33:53 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040090080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1908.232921][T22824] IPVS: ftp: loaded support on port[0] = 21 [ 1908.368926][T22831] IPVS: ftp: loaded support on port[0] = 21 08:33:54 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:54 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1908.542750][T22829] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1908.570589][T22829] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1908.648475][T22829] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1908.684872][T22829] EXT4-fs (loop3): group descriptors corrupted! [ 1908.815569][T22846] IPVS: ftp: loaded support on port[0] = 21 [ 1908.935082][T22850] IPVS: ftp: loaded support on port[0] = 21 08:33:54 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000400a0080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:54 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:54 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:54 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1909.297446][T22858] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1909.324686][T22858] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1909.337239][T22858] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1909.348656][T22858] EXT4-fs (loop3): group descriptors corrupted! [ 1909.401047][T22871] IPVS: ftp: loaded support on port[0] = 21 08:33:55 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1909.572790][T22872] IPVS: ftp: loaded support on port[0] = 21 08:33:55 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1909.635248][T22881] IPVS: ftp: loaded support on port[0] = 21 08:33:55 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000400c0080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1909.856648][T22891] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1909.869154][T22891] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1909.982712][T22888] IPVS: ftp: loaded support on port[0] = 21 [ 1909.998256][T22894] IPVS: ftp: loaded support on port[0] = 21 08:33:55 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1910.038222][T22891] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1910.056928][T22891] EXT4-fs (loop3): group descriptors corrupted! 08:33:55 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:55 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:55 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040230080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1910.473091][T22920] IPVS: ftp: loaded support on port[0] = 21 [ 1910.476120][T22924] IPVS: ftp: loaded support on port[0] = 21 08:33:56 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x0, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:56 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1910.652938][T22918] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1910.672861][T22925] IPVS: ftp: loaded support on port[0] = 21 [ 1910.674315][T22918] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1910.714767][T22918] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1910.743277][T22918] EXT4-fs (loop3): group descriptors corrupted! 08:33:56 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000402d0080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1911.047988][T22947] IPVS: ftp: loaded support on port[0] = 21 [ 1911.094272][T22949] IPVS: ftp: loaded support on port[0] = 21 08:33:56 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:56 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:56 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1911.328913][T22953] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1911.380794][T22953] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1911.398772][T22953] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1911.452920][T22953] EXT4-fs (loop3): group descriptors corrupted! [ 1911.580232][T22970] IPVS: ftp: loaded support on port[0] = 21 [ 1911.596073][T22973] IPVS: ftp: loaded support on port[0] = 21 [ 1911.627078][T22968] IPVS: ftp: loaded support on port[0] = 21 08:33:57 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x0, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:57 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1911.793360][T22977] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1911.806082][T22977] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1911.821034][T22977] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1911.832862][T22977] EXT4-fs (loop3): group descriptors corrupted! 08:33:57 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040480080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1912.137764][T22992] IPVS: ftp: loaded support on port[0] = 21 [ 1912.140739][T22993] IPVS: ftp: loaded support on port[0] = 21 08:33:57 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040050080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:33:57 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:57 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1912.373401][T22998] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1912.410778][T22998] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1912.444770][T22998] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1912.460687][T23002] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1912.492133][T22998] EXT4-fs (loop3): group descriptors corrupted! [ 1912.506745][T23002] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1912.559245][T23002] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1912.617258][T23016] IPVS: ftp: loaded support on port[0] = 21 [ 1912.639563][T23002] EXT4-fs (loop0): group descriptors corrupted! 08:33:58 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:58 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000404c0080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1912.812403][T23019] IPVS: ftp: loaded support on port[0] = 21 08:33:58 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x0, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:33:58 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1913.209722][T23042] IPVS: ftp: loaded support on port[0] = 21 [ 1913.241744][T23044] IPVS: ftp: loaded support on port[0] = 21 08:33:58 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1913.345718][T23035] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1913.360079][T23035] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1913.381174][T23035] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:59 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1913.394356][T23035] EXT4-fs (loop3): group descriptors corrupted! [ 1913.495433][T23052] IPVS: ftp: loaded support on port[0] = 21 08:33:59 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040600080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1913.790408][T23065] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1913.822425][T23065] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1913.834573][T23068] IPVS: ftp: loaded support on port[0] = 21 08:33:59 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1913.884363][T23069] IPVS: ftp: loaded support on port[0] = 21 [ 1913.922513][T23065] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:33:59 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x0, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1913.971076][T23065] EXT4-fs (loop3): group descriptors corrupted! [ 1914.192267][T23083] IPVS: ftp: loaded support on port[0] = 21 [ 1914.293538][T23086] IPVS: ftp: loaded support on port[0] = 21 08:34:00 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040680080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:00 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x0, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:00 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1914.561521][T23092] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1914.583455][T23092] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1914.599803][T23092] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1914.647479][T23092] EXT4-fs (loop3): group descriptors corrupted! 08:34:00 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x0, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1914.687632][T23100] IPVS: ftp: loaded support on port[0] = 21 08:34:00 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000406c0080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:00 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:00 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x0, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1915.120076][T23119] IPVS: ftp: loaded support on port[0] = 21 [ 1915.311103][T23114] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 08:34:00 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x0, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1915.357026][T23120] IPVS: ftp: loaded support on port[0] = 21 [ 1915.379213][T23131] IPVS: ftp: loaded support on port[0] = 21 [ 1915.410850][T23114] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1915.546448][T23135] IPVS: ftp: loaded support on port[0] = 21 [ 1915.591426][T23114] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:34:01 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x0, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1915.686606][T23114] EXT4-fs (loop3): group descriptors corrupted! 08:34:01 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:01 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1915.990897][T23155] IPVS: ftp: loaded support on port[0] = 21 08:34:01 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040740080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1916.069138][T23150] IPVS: ftp: loaded support on port[0] = 21 08:34:01 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1916.306476][T23176] IPVS: ftp: loaded support on port[0] = 21 [ 1916.427018][T23179] IPVS: ftp: loaded support on port[0] = 21 [ 1916.501519][T23169] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1916.518720][T23169] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1916.545690][T23169] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1916.554154][T23174] IPVS: ftp: loaded support on port[0] = 21 [ 1916.557361][T23169] EXT4-fs (loop3): group descriptors corrupted! 08:34:02 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:02 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x0, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:02 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000407a0080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1916.925888][T23199] IPVS: ftp: loaded support on port[0] = 21 [ 1917.047543][T23202] IPVS: ftp: loaded support on port[0] = 21 08:34:02 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:02 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:02 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1917.142132][T23196] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1917.163554][T23196] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1917.174367][T23196] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1917.217803][T23196] EXT4-fs (loop3): group descriptors corrupted! [ 1917.497078][T23221] IPVS: ftp: loaded support on port[0] = 21 [ 1917.498685][T23224] IPVS: ftp: loaded support on port[0] = 21 08:34:03 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040480180000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:03 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1917.637099][T23227] IPVS: ftp: loaded support on port[0] = 21 08:34:03 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x0, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1917.864507][T23235] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1917.876545][T23235] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1917.886630][T23235] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1917.896935][T23235] EXT4-fs (loop3): group descriptors corrupted! [ 1918.012168][T23248] IPVS: ftp: loaded support on port[0] = 21 [ 1918.023144][T23249] IPVS: ftp: loaded support on port[0] = 21 08:34:03 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:03 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:03 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:03 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000380000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1918.470324][T23266] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1918.473523][T23273] IPVS: ftp: loaded support on port[0] = 21 [ 1918.484118][T23266] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1918.535742][T23272] IPVS: ftp: loaded support on port[0] = 21 [ 1918.578750][T23266] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1918.654266][T23266] EXT4-fs (loop3): group descriptors corrupted! 08:34:04 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x0, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:04 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x0, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1918.703680][T23274] IPVS: ftp: loaded support on port[0] = 21 08:34:04 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040100480000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1919.083337][T23294] IPVS: ftp: loaded support on port[0] = 21 [ 1919.106146][T23295] IPVS: ftp: loaded support on port[0] = 21 [ 1919.230192][T23296] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1919.243968][T23296] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1919.288193][T23296] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1919.301929][T23296] EXT4-fs (loop3): group descriptors corrupted! 08:34:05 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000580000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:05 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040100480000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:05 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1919.947687][T23308] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1919.965651][T23307] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1919.986344][T23308] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1919.996514][T23307] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1920.016724][T23307] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1920.027851][T23308] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1920.038894][T23307] EXT4-fs (loop3): group descriptors corrupted! [ 1920.045834][T23308] EXT4-fs (loop0): group descriptors corrupted! [ 1920.145234][T23319] IPVS: ftp: loaded support on port[0] = 21 08:34:05 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:06 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000680000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1920.576342][T23330] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1920.597605][T23330] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1920.608266][T23330] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1920.622288][T23330] EXT4-fs (loop3): group descriptors corrupted! [ 1920.631749][T23334] IPVS: ftp: loaded support on port[0] = 21 08:34:06 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:06 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1921.328155][T23352] IPVS: ftp: loaded support on port[0] = 21 [ 1921.353505][T23351] IPVS: ftp: loaded support on port[0] = 21 08:34:09 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:09 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:09 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:09 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000780000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:09 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:09 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1923.630929][T23367] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1923.643424][T23367] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1923.653624][T23367] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1923.664392][T23367] EXT4-fs (loop3): group descriptors corrupted! [ 1923.789321][T23384] IPVS: ftp: loaded support on port[0] = 21 [ 1923.789437][T23385] IPVS: ftp: loaded support on port[0] = 21 [ 1923.819813][T23386] IPVS: ftp: loaded support on port[0] = 21 [ 1924.007709][T23395] IPVS: ftp: loaded support on port[0] = 21 [ 1924.025093][T23396] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1924.037381][T23396] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1924.049920][T23394] IPVS: ftp: loaded support on port[0] = 21 [ 1924.060151][T23396] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1924.071082][T23396] EXT4-fs (loop3): group descriptors corrupted! 08:34:09 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000980000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1924.352427][T23405] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1924.364042][T23405] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1924.388645][T23405] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:34:10 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1924.418703][T23405] EXT4-fs (loop3): group descriptors corrupted! 08:34:10 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:10 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:10 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:10 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000406b0980000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1924.776688][T23429] IPVS: ftp: loaded support on port[0] = 21 [ 1924.824527][T23431] IPVS: ftp: loaded support on port[0] = 21 [ 1924.853772][T23432] IPVS: ftp: loaded support on port[0] = 21 [ 1925.015899][T23437] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1925.029436][T23437] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1925.040147][T23437] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1925.050817][T23437] EXT4-fs (loop3): group descriptors corrupted! [ 1925.215367][T23446] IPVS: ftp: loaded support on port[0] = 21 08:34:10 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000406c0980000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:11 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1925.675191][T23452] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1925.789967][T23461] IPVS: ftp: loaded support on port[0] = 21 [ 1925.809015][T23452] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1925.913890][T23452] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1925.927139][T23452] EXT4-fs (loop3): group descriptors corrupted! [ 1926.032384][T23466] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1926.043863][T23466] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1926.055415][T23466] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1926.066068][T23466] EXT4-fs (loop3): group descriptors corrupted! 08:34:11 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:11 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:11 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:11 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:11 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000a80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1926.440815][T23477] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1926.456093][T23477] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1926.579993][T23493] IPVS: ftp: loaded support on port[0] = 21 [ 1926.650958][T23495] IPVS: ftp: loaded support on port[0] = 21 [ 1926.655359][T23496] IPVS: ftp: loaded support on port[0] = 21 08:34:12 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1926.773067][T23477] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1926.783894][T23477] EXT4-fs (loop3): group descriptors corrupted! [ 1926.803597][T23500] IPVS: ftp: loaded support on port[0] = 21 08:34:12 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000c80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1927.094978][T23510] IPVS: ftp: loaded support on port[0] = 21 08:34:12 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:12 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:12 executing program 1: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000406c0080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1927.273052][T23508] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1927.309827][T23508] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:34:12 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1927.338704][T23508] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1927.388723][T23508] EXT4-fs (loop3): group descriptors corrupted! [ 1927.490477][T23522] IPVS: ftp: loaded support on port[0] = 21 08:34:13 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:13 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1927.809186][T23545] IPVS: ftp: loaded support on port[0] = 21 [ 1927.846125][T23548] IPVS: ftp: loaded support on port[0] = 21 [ 1927.868936][T23549] IPVS: ftp: loaded support on port[0] = 21 08:34:13 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1928.100971][T23556] IPVS: ftp: loaded support on port[0] = 21 08:34:13 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040041080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1928.317933][T23564] IPVS: ftp: loaded support on port[0] = 21 08:34:14 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:14 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x0, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:14 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:14 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1928.547366][T23567] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1928.583800][T23567] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1928.626496][T23567] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1928.648673][T23567] EXT4-fs (loop3): group descriptors corrupted! [ 1928.696195][T23578] IPVS: ftp: loaded support on port[0] = 21 08:34:14 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:14 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1928.948684][T23593] IPVS: ftp: loaded support on port[0] = 21 [ 1929.102770][T23601] IPVS: ftp: loaded support on port[0] = 21 [ 1929.173098][T23594] IPVS: ftp: loaded support on port[0] = 21 08:34:14 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040201080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1929.374323][T23589] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1929.384590][T23589] CPU: 1 PID: 23589 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1929.392922][T23589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1929.403007][T23589] Call Trace: [ 1929.406314][T23589] dump_stack+0x11d/0x181 [ 1929.410805][T23589] dump_header+0xaa/0x449 [ 1929.415189][T23589] oom_kill_process.cold+0x10/0x15 [ 1929.420318][T23589] out_of_memory+0x231/0xa00 [ 1929.425709][T23589] mem_cgroup_out_of_memory+0x128/0x150 [ 1929.431334][T23589] try_charge+0xb5c/0xbe0 [ 1929.435783][T23589] ? __rcu_read_unlock+0x10/0x3c0 [ 1929.440826][T23589] mem_cgroup_try_charge+0xd2/0x260 [ 1929.446048][T23589] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1929.451713][T23589] __handle_mm_fault+0x17ab/0x2c70 [ 1929.456993][T23589] handle_mm_fault+0x21b/0x530 [ 1929.461773][T23589] __do_page_fault+0x456/0x8d0 [ 1929.466762][T23589] do_page_fault+0x38/0x194 [ 1929.471594][T23589] page_fault+0x34/0x40 [ 1929.475748][T23589] RIP: 0033:0x411e6f [ 1929.479699][T23589] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1929.499308][T23589] RSP: 002b:00007ffc504a9600 EFLAGS: 00010206 [ 1929.499863][T23616] IPVS: ftp: loaded support on port[0] = 21 [ 1929.505392][T23589] RAX: 00007ffbf64e5000 RBX: 0000000000020000 RCX: 000000000045a6ca [ 1929.505400][T23589] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1929.505410][T23589] RBP: 00007ffc504a96e0 R08: ffffffffffffffff R09: 0000000000000000 [ 1929.505469][T23589] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc504a97d0 [ 1929.505525][T23589] R13: 00007ffbf6505700 R14: 0000000000000002 R15: 000000000075c07c [ 1929.551736][T23589] memory: usage 307200kB, limit 307200kB, failcnt 785 [ 1929.558521][T23589] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1929.565547][T23589] Memory cgroup stats for /syz1: [ 1929.565779][T23589] anon 293826560 08:34:15 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1929.565779][T23589] file 0 [ 1929.565779][T23589] kernel_stack 1622016 [ 1929.565779][T23589] slab 4460544 [ 1929.565779][T23589] sock 0 [ 1929.565779][T23589] shmem 0 [ 1929.565779][T23589] file_mapped 0 [ 1929.565779][T23589] file_dirty 0 [ 1929.565779][T23589] file_writeback 0 [ 1929.565779][T23589] anon_thp 281018368 [ 1929.565779][T23589] inactive_anon 69632 [ 1929.565779][T23589] active_anon 293826560 [ 1929.565779][T23589] inactive_file 122880 [ 1929.565779][T23589] active_file 98304 [ 1929.565779][T23589] unevictable 131072 [ 1929.565779][T23589] slab_reclaimable 1081344 [ 1929.565779][T23589] slab_unreclaimable 3379200 [ 1929.565779][T23589] pgfault 134145 [ 1929.565779][T23589] pgmajfault 0 [ 1929.565779][T23589] workingset_refault 0 [ 1929.565779][T23589] workingset_activate 0 [ 1929.565779][T23589] workingset_nodereclaim 0 [ 1929.565779][T23589] pgrefill 809 [ 1929.565779][T23589] pgscan 768 [ 1929.565779][T23589] pgsteal 90 [ 1929.620073][T23615] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1929.659829][T23589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16183,uid=0 [ 1929.660031][T23589] Memory cgroup out of memory: Killed process 16183 (syz-executor.1) total-vm:73108kB, anon-rss:12652kB, file-rss:35880kB, shmem-rss:0kB, UID:0 pgtables:155648kB oom_score_adj:1000 [ 1929.758919][T23615] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1929.788490][T23620] IPVS: ftp: loaded support on port[0] = 21 [ 1929.907337][T23619] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1929.917712][T23619] CPU: 1 PID: 23619 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1929.926045][T23619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1929.936447][T23619] Call Trace: [ 1929.939745][T23619] dump_stack+0x11d/0x181 [ 1929.945140][T23619] dump_header+0xaa/0x449 [ 1929.949556][T23619] oom_kill_process.cold+0x10/0x15 [ 1929.954668][T23619] out_of_memory+0x231/0xa00 [ 1929.959302][T23619] mem_cgroup_out_of_memory+0x128/0x150 [ 1929.964851][T23619] try_charge+0xb5c/0xbe0 [ 1929.969305][T23619] ? __rcu_read_unlock+0x10/0x3c0 [ 1929.974331][T23619] mem_cgroup_try_charge+0xd2/0x260 [ 1929.979540][T23619] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1929.985221][T23619] wp_page_copy+0x322/0x1120 [ 1929.989818][T23619] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1929.995550][T23619] do_wp_page+0x192/0x11f0 [ 1929.999958][T23619] ? __udelay+0x10/0x20 [ 1930.004156][T23619] __handle_mm_fault+0x1ab1/0x2c70 [ 1930.009267][T23619] ? debug_smp_processor_id+0x4c/0x172 [ 1930.014770][T23619] handle_mm_fault+0x21b/0x530 [ 1930.019618][T23619] __do_page_fault+0x456/0x8d0 [ 1930.024386][T23619] ? cgroup_rstat_updated+0xbe/0x1e0 [ 1930.029665][T23619] do_page_fault+0x38/0x194 [ 1930.034317][T23619] page_fault+0x34/0x40 [ 1930.038472][T23619] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1930.045136][T23619] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1930.064741][T23619] RSP: 0018:ffffc9000a5efbc0 EFLAGS: 00010206 [ 1930.070797][T23619] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1930.078758][T23619] RDX: 0000000000001000 RSI: ffff888055bbdb00 RDI: 0000000020c66000 [ 1930.086796][T23619] RBP: ffffc9000a5efbf8 R08: ffff8880aef360c0 R09: 00008880aef36bd8 [ 1930.094783][T23619] R10: 0000000000000000 R11: 00008880aef36bdf R12: 0000000020c65500 [ 1930.102854][T23619] R13: 0000000020c66500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1930.110863][T23619] ? copyout+0xa5/0xb0 [ 1930.114940][T23619] copy_page_to_iter+0x254/0x8b0 [ 1930.119897][T23619] pipe_to_user+0x71/0xc0 [ 1930.124234][T23619] __splice_from_pipe+0x248/0x480 [ 1930.129404][T23619] ? iter_to_pipe+0x3f0/0x3f0 [ 1930.134101][T23619] do_vmsplice.part.0+0x1c5/0x210 [ 1930.139208][T23619] __do_sys_vmsplice+0x15f/0x1c0 [ 1930.144247][T23619] ? __read_once_size+0x5a/0xe0 [ 1930.149113][T23619] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1930.154832][T23619] ? _copy_to_user+0x84/0xb0 [ 1930.159420][T23619] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1930.165651][T23619] ? put_timespec64+0x94/0xc0 [ 1930.173283][T23619] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1930.179544][T23619] __x64_sys_vmsplice+0x5e/0x80 [ 1930.184406][T23619] do_syscall_64+0xcc/0x370 [ 1930.188923][T23619] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1930.195042][T23619] RIP: 0033:0x45a679 [ 1930.198998][T23619] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1930.218791][T23619] RSP: 002b:00007ffbf6504c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1930.227198][T23619] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1930.235168][T23619] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1930.243232][T23619] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1930.251230][T23619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbf65056d4 [ 1930.259194][T23619] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1930.267577][T23619] memory: usage 307200kB, limit 307200kB, failcnt 915 [ 1930.274408][T23619] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1930.281290][T23619] Memory cgroup stats for /syz1: [ 1930.281474][T23619] anon 293941248 [ 1930.281474][T23619] file 0 [ 1930.281474][T23619] kernel_stack 1658880 [ 1930.281474][T23619] slab 4460544 [ 1930.281474][T23619] sock 0 [ 1930.281474][T23619] shmem 0 [ 1930.281474][T23619] file_mapped 0 [ 1930.281474][T23619] file_dirty 0 [ 1930.281474][T23619] file_writeback 0 [ 1930.281474][T23619] anon_thp 278921216 [ 1930.281474][T23619] inactive_anon 69632 [ 1930.281474][T23619] active_anon 293937152 [ 1930.281474][T23619] inactive_file 122880 [ 1930.281474][T23619] active_file 98304 [ 1930.281474][T23619] unevictable 131072 [ 1930.281474][T23619] slab_reclaimable 1081344 [ 1930.281474][T23619] slab_unreclaimable 3379200 [ 1930.281474][T23619] pgfault 135333 [ 1930.281474][T23619] pgmajfault 0 [ 1930.281474][T23619] workingset_refault 0 [ 1930.281474][T23619] workingset_activate 0 [ 1930.281474][T23619] workingset_nodereclaim 0 [ 1930.281474][T23619] pgrefill 842 [ 1930.281474][T23619] pgscan 834 [ 1930.281474][T23619] pgsteal 90 [ 1930.375969][T23619] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23589,uid=0 [ 1930.391831][T23619] Memory cgroup out of memory: Killed process 23608 (syz-executor.1) total-vm:73108kB, anon-rss:12776kB, file-rss:35932kB, shmem-rss:0kB, UID:0 pgtables:155648kB oom_score_adj:1000 08:34:16 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1930.417367][ T1070] oom_reaper: reaped process 23608 (syz-executor.1), now anon-rss:0kB, file-rss:34972kB, shmem-rss:0kB [ 1930.443289][T23615] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:34:16 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x0, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1930.496448][T23615] EXT4-fs (loop3): group descriptors corrupted! 08:34:16 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:34:16 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:16 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040002080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1930.693801][T23632] IPVS: ftp: loaded support on port[0] = 21 [ 1930.862309][T23658] IPVS: ftp: loaded support on port[0] = 21 [ 1930.897072][T23660] IPVS: ftp: loaded support on port[0] = 21 [ 1930.904305][T23662] IPVS: ftp: loaded support on port[0] = 21 [ 1930.927963][T23661] IPVS: ftp: loaded support on port[0] = 21 [ 1930.996676][T23651] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1931.007264][T23651] CPU: 0 PID: 23651 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1931.015625][T23651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1931.025686][T23651] Call Trace: [ 1931.029131][T23651] dump_stack+0x11d/0x181 [ 1931.033629][T23651] dump_header+0xaa/0x449 [ 1931.038014][T23651] oom_kill_process.cold+0x10/0x15 [ 1931.043277][T23651] out_of_memory+0x231/0xa00 [ 1931.047967][T23651] mem_cgroup_out_of_memory+0x128/0x150 [ 1931.053921][T23651] try_charge+0xb5c/0xbe0 [ 1931.058345][T23651] ? __rcu_read_unlock+0x10/0x3c0 [ 1931.063425][T23651] mem_cgroup_try_charge+0xd2/0x260 [ 1931.068665][T23651] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1931.074377][T23651] wp_page_copy+0x322/0x1120 [ 1931.079026][T23651] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1931.084826][T23651] do_wp_page+0x192/0x11f0 [ 1931.089371][T23651] ? __udelay+0x10/0x20 [ 1931.093546][T23651] __handle_mm_fault+0x1ab1/0x2c70 [ 1931.098700][T23651] handle_mm_fault+0x21b/0x530 [ 1931.103506][T23651] __do_page_fault+0x456/0x8d0 [ 1931.108323][T23651] ? cgroup_rstat_updated+0xbe/0x1e0 [ 1931.113636][T23651] do_page_fault+0x38/0x194 [ 1931.119205][T23651] page_fault+0x34/0x40 [ 1931.123382][T23651] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1931.130048][T23651] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1931.149688][T23651] RSP: 0018:ffffc9000a763bc0 EFLAGS: 00010206 [ 1931.155776][T23651] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1931.163853][T23651] RDX: 0000000000001000 RSI: ffff8880657e6b00 RDI: 0000000020c65000 [ 1931.171870][T23651] RBP: ffffc9000a763bf8 R08: ffff8880731c5080 R09: 00008880731c5b98 [ 1931.180099][T23651] R10: 0000000000000001 R11: 00008880731c5b9f R12: 0000000020c64500 [ 1931.188109][T23651] R13: 0000000020c65500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1931.196296][T23651] ? copyout+0xa5/0xb0 [ 1931.200432][T23651] copy_page_to_iter+0x254/0x8b0 [ 1931.205402][T23651] pipe_to_user+0x71/0xc0 [ 1931.209755][T23651] __splice_from_pipe+0x248/0x480 [ 1931.214894][T23651] ? iter_to_pipe+0x3f0/0x3f0 [ 1931.219585][T23651] do_vmsplice.part.0+0x1c5/0x210 [ 1931.224680][T23651] __do_sys_vmsplice+0x15f/0x1c0 [ 1931.229657][T23651] ? __read_once_size+0x5a/0xe0 [ 1931.234609][T23651] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1931.240400][T23651] ? _copy_to_user+0x84/0xb0 [ 1931.245024][T23651] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1931.251285][T23651] ? put_timespec64+0x94/0xc0 [ 1931.256068][T23651] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1931.262379][T23651] __x64_sys_vmsplice+0x5e/0x80 [ 1931.267307][T23651] do_syscall_64+0xcc/0x370 [ 1931.273679][T23651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1931.279580][T23651] RIP: 0033:0x45a679 [ 1931.283518][T23651] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1931.303130][T23651] RSP: 002b:00007ffbf6504c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1931.311614][T23651] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1931.320057][T23651] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1931.328049][T23651] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1931.336903][T23651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbf65056d4 [ 1931.344884][T23651] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1931.353222][T23651] memory: usage 307200kB, limit 307200kB, failcnt 932 [ 1931.360077][T23651] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1931.367735][T23651] Memory cgroup stats for /syz1: [ 1931.367984][T23651] anon 293941248 [ 1931.367984][T23651] file 0 [ 1931.367984][T23651] kernel_stack 1622016 [ 1931.367984][T23651] slab 4460544 [ 1931.367984][T23651] sock 0 [ 1931.367984][T23651] shmem 0 [ 1931.367984][T23651] file_mapped 0 [ 1931.367984][T23651] file_dirty 0 [ 1931.367984][T23651] file_writeback 0 [ 1931.367984][T23651] anon_thp 281018368 [ 1931.367984][T23651] inactive_anon 69632 [ 1931.367984][T23651] active_anon 293806080 [ 1931.367984][T23651] inactive_file 122880 [ 1931.367984][T23651] active_file 98304 [ 1931.367984][T23651] unevictable 131072 [ 1931.367984][T23651] slab_reclaimable 1081344 [ 1931.367984][T23651] slab_unreclaimable 3379200 [ 1931.367984][T23651] pgfault 135531 [ 1931.367984][T23651] pgmajfault 0 [ 1931.367984][T23651] workingset_refault 0 [ 1931.367984][T23651] workingset_activate 0 08:34:17 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1931.367984][T23651] workingset_nodereclaim 0 [ 1931.367984][T23651] pgrefill 842 [ 1931.367984][T23651] pgscan 834 [ 1931.367984][T23651] pgsteal 90 [ 1931.461692][T23651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23637,uid=0 [ 1931.477265][T23651] Memory cgroup out of memory: Killed process 23637 (syz-executor.1) total-vm:73108kB, anon-rss:12708kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:155648kB oom_score_adj:1000 08:34:17 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:34:17 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040030080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:17 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:17 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x0, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1931.698299][T23668] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1931.782877][T23668] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1931.889224][T23681] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1931.899602][T23681] CPU: 1 PID: 23681 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1931.908089][T23681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1931.908899][T23668] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1931.918152][T23681] Call Trace: [ 1931.918184][T23681] dump_stack+0x11d/0x181 [ 1931.918278][T23681] dump_header+0xaa/0x449 [ 1931.940361][T23681] oom_kill_process.cold+0x10/0x15 [ 1931.945546][T23681] out_of_memory+0x231/0xa00 [ 1931.950168][T23681] mem_cgroup_out_of_memory+0x128/0x150 [ 1931.955728][T23681] try_charge+0xb5c/0xbe0 [ 1931.959565][T23668] EXT4-fs (loop3): group descriptors corrupted! [ 1931.960061][T23681] ? __rcu_read_unlock+0x10/0x3c0 [ 1931.960154][T23681] mem_cgroup_try_charge+0xd2/0x260 [ 1931.976592][T23681] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1931.982274][T23681] wp_page_copy+0x322/0x1120 [ 1931.986953][T23681] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1931.992744][T23681] do_wp_page+0x192/0x11f0 [ 1931.995385][T23680] IPVS: ftp: loaded support on port[0] = 21 [ 1931.997198][T23681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1931.997245][T23681] ? debug_smp_processor_id+0x4c/0x172 [ 1932.014831][T23681] __handle_mm_fault+0x1ab1/0x2c70 [ 1932.019983][T23681] handle_mm_fault+0x21b/0x530 [ 1932.024777][T23681] __do_page_fault+0x456/0x8d0 [ 1932.029553][T23681] ? cgroup_rstat_updated+0xbe/0x1e0 [ 1932.034866][T23681] do_page_fault+0x38/0x194 [ 1932.039437][T23681] page_fault+0x34/0x40 [ 1932.043617][T23681] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1932.050209][T23681] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1932.071295][T23681] RSP: 0018:ffffc9000a8e3bc0 EFLAGS: 00010206 [ 1932.077375][T23681] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1932.085355][T23681] RDX: 0000000000001000 RSI: ffff88806437ab00 RDI: 0000000020c64000 [ 1932.093335][T23681] RBP: ffffc9000a8e3bf8 R08: ffff888075d72100 R09: 0000888075d72c18 [ 1932.101313][T23681] R10: 0000000000000000 R11: 0000888075d72c1f R12: 0000000020c63500 [ 1932.109393][T23681] R13: 0000000020c64500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1932.117514][T23681] ? copyout+0xa5/0xb0 [ 1932.121873][T23681] copy_page_to_iter+0x254/0x8b0 [ 1932.126836][T23681] pipe_to_user+0x71/0xc0 [ 1932.131207][T23681] __splice_from_pipe+0x248/0x480 [ 1932.136336][T23681] ? iter_to_pipe+0x3f0/0x3f0 [ 1932.141149][T23681] do_vmsplice.part.0+0x1c5/0x210 [ 1932.146257][T23681] __do_sys_vmsplice+0x15f/0x1c0 [ 1932.151255][T23681] ? __read_once_size+0x5a/0xe0 [ 1932.156145][T23681] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1932.161956][T23681] ? _copy_to_user+0x84/0xb0 [ 1932.166593][T23681] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1932.172853][T23681] ? put_timespec64+0x94/0xc0 [ 1932.177551][T23681] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1932.183846][T23681] __x64_sys_vmsplice+0x5e/0x80 [ 1932.188717][T23681] do_syscall_64+0xcc/0x370 [ 1932.193290][T23681] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1932.199184][T23681] RIP: 0033:0x45a679 [ 1932.203091][T23681] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1932.222711][T23681] RSP: 002b:00007ffbf6504c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1932.231132][T23681] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1932.239141][T23681] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1932.247236][T23681] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1932.255392][T23681] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbf65056d4 [ 1932.256436][T23702] IPVS: ftp: loaded support on port[0] = 21 [ 1932.263422][T23681] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1932.263577][T23681] memory: usage 307200kB, limit 307200kB, failcnt 959 [ 1932.284251][T23681] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1932.291126][T23681] Memory cgroup stats for /syz1: [ 1932.291382][T23681] anon 293810176 [ 1932.291382][T23681] file 0 [ 1932.291382][T23681] kernel_stack 1585152 [ 1932.291382][T23681] slab 4460544 [ 1932.291382][T23681] sock 0 [ 1932.291382][T23681] shmem 0 [ 1932.291382][T23681] file_mapped 0 [ 1932.291382][T23681] file_dirty 0 [ 1932.291382][T23681] file_writeback 0 [ 1932.291382][T23681] anon_thp 281018368 [ 1932.291382][T23681] inactive_anon 69632 [ 1932.291382][T23681] active_anon 293810176 [ 1932.291382][T23681] inactive_file 122880 [ 1932.291382][T23681] active_file 98304 [ 1932.291382][T23681] unevictable 131072 [ 1932.291382][T23681] slab_reclaimable 1081344 [ 1932.291382][T23681] slab_unreclaimable 3379200 [ 1932.291382][T23681] pgfault 135696 [ 1932.291382][T23681] pgmajfault 0 [ 1932.291382][T23681] workingset_refault 0 [ 1932.291382][T23681] workingset_activate 0 [ 1932.291382][T23681] workingset_nodereclaim 0 [ 1932.291382][T23681] pgrefill 842 [ 1932.291382][T23681] pgscan 834 [ 1932.291382][T23681] pgsteal 90 [ 1932.291689][T23703] IPVS: ftp: loaded support on port[0] = 21 [ 1932.296340][T23681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16201,uid=0 [ 1932.408126][T23681] Memory cgroup out of memory: Killed process 16201 (syz-executor.1) total-vm:73108kB, anon-rss:12468kB, file-rss:35880kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 08:34:18 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1932.531901][T23683] IPVS: ftp: loaded support on port[0] = 21 [ 1932.623604][T23690] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1932.648812][T23690] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:34:18 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:18 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040102080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1932.689651][T23690] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1932.719753][T23690] EXT4-fs (loop0): group descriptors corrupted! 08:34:18 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1932.840619][T23714] IPVS: ftp: loaded support on port[0] = 21 08:34:18 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:18 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x0, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:18 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1933.147828][T23718] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1933.168970][T23718] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1933.263110][T23745] IPVS: ftp: loaded support on port[0] = 21 [ 1933.292799][T23748] IPVS: ftp: loaded support on port[0] = 21 [ 1933.322773][T23750] IPVS: ftp: loaded support on port[0] = 21 [ 1933.324797][T23751] IPVS: ftp: loaded support on port[0] = 21 [ 1933.397488][T23739] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1933.407760][T23739] CPU: 0 PID: 23739 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1933.417337][T23739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1933.427487][T23739] Call Trace: [ 1933.431524][T23739] dump_stack+0x11d/0x181 [ 1933.435913][T23739] dump_header+0xaa/0x449 [ 1933.440356][T23739] oom_kill_process.cold+0x10/0x15 [ 1933.445574][T23739] out_of_memory+0x231/0xa00 [ 1933.450190][T23739] mem_cgroup_out_of_memory+0x128/0x150 [ 1933.455772][T23739] try_charge+0xb5c/0xbe0 [ 1933.460159][T23739] ? __rcu_read_unlock+0x10/0x3c0 [ 1933.465209][T23739] mem_cgroup_try_charge+0xd2/0x260 [ 1933.470474][T23739] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1933.476126][T23739] wp_page_copy+0x322/0x1120 [ 1933.480757][T23739] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1933.486643][T23739] do_wp_page+0x192/0x11f0 [ 1933.491127][T23739] __handle_mm_fault+0x1ab1/0x2c70 [ 1933.496352][T23739] handle_mm_fault+0x21b/0x530 [ 1933.501147][T23739] __do_page_fault+0x456/0x8d0 [ 1933.505931][T23739] ? cgroup_rstat_updated+0xbe/0x1e0 [ 1933.511266][T23739] do_page_fault+0x38/0x194 [ 1933.516065][T23739] page_fault+0x34/0x40 [ 1933.520247][T23739] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1933.526952][T23739] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1933.546653][T23739] RSP: 0018:ffffc9000aabbbc0 EFLAGS: 00010206 [ 1933.554754][T23739] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1933.562834][T23739] RDX: 0000000000001000 RSI: ffff8880add1ab00 RDI: 0000000020c4f000 [ 1933.571099][T23739] RBP: ffffc9000aabbbf8 R08: ffff88805a6f9000 R09: 000088805a6f9b18 [ 1933.578750][T23718] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1933.579802][T23739] R10: 0000000000000001 R11: 000088805a6f9b1f R12: 0000000020c4e500 [ 1933.579814][T23739] R13: 0000000020c4f500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1933.579916][T23739] ? copyout+0xa5/0xb0 [ 1933.610234][T23739] copy_page_to_iter+0x254/0x8b0 [ 1933.615215][T23739] pipe_to_user+0x71/0xc0 [ 1933.619568][T23739] __splice_from_pipe+0x248/0x480 [ 1933.622285][T23718] EXT4-fs (loop3): group descriptors corrupted! [ 1933.624737][T23739] ? iter_to_pipe+0x3f0/0x3f0 [ 1933.624762][T23739] do_vmsplice.part.0+0x1c5/0x210 [ 1933.640755][T23739] __do_sys_vmsplice+0x15f/0x1c0 [ 1933.646591][T23739] ? __read_once_size+0x5a/0xe0 [ 1933.651581][T23739] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1933.657327][T23739] ? _copy_to_user+0x84/0xb0 [ 1933.661951][T23739] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1933.669782][T23739] ? put_timespec64+0x94/0xc0 [ 1933.674512][T23739] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1933.680771][T23739] __x64_sys_vmsplice+0x5e/0x80 [ 1933.685745][T23739] do_syscall_64+0xcc/0x370 [ 1933.690368][T23739] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1933.696269][T23739] RIP: 0033:0x45a679 [ 1933.700174][T23739] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1933.719788][T23739] RSP: 002b:00007ffbf6504c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1933.728308][T23739] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1933.736483][T23739] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1933.739113][T23761] IPVS: ftp: loaded support on port[0] = 21 [ 1933.744529][T23739] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1933.758978][T23739] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbf65056d4 [ 1933.766967][T23739] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1933.775926][T23739] memory: usage 307200kB, limit 307200kB, failcnt 1145 [ 1933.783563][T23739] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1933.790556][T23739] Memory cgroup stats for /syz1: [ 1933.790926][T23739] anon 293785600 [ 1933.790926][T23739] file 0 [ 1933.790926][T23739] kernel_stack 1622016 [ 1933.790926][T23739] slab 4599808 [ 1933.790926][T23739] sock 0 [ 1933.790926][T23739] shmem 0 [ 1933.790926][T23739] file_mapped 0 [ 1933.790926][T23739] file_dirty 0 [ 1933.790926][T23739] file_writeback 0 [ 1933.790926][T23739] anon_thp 281018368 [ 1933.790926][T23739] inactive_anon 69632 [ 1933.790926][T23739] active_anon 293785600 [ 1933.790926][T23739] inactive_file 122880 [ 1933.790926][T23739] active_file 98304 [ 1933.790926][T23739] unevictable 131072 [ 1933.790926][T23739] slab_reclaimable 1081344 [ 1933.790926][T23739] slab_unreclaimable 3518464 [ 1933.790926][T23739] pgfault 135993 [ 1933.790926][T23739] pgmajfault 0 [ 1933.790926][T23739] workingset_refault 0 [ 1933.790926][T23739] workingset_activate 0 [ 1933.790926][T23739] workingset_nodereclaim 0 [ 1933.790926][T23739] pgrefill 842 [ 1933.790926][T23739] pgscan 834 [ 1933.790926][T23739] pgsteal 90 08:34:19 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:19 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1933.893300][T23739] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23724,uid=0 [ 1933.912005][T23739] Memory cgroup out of memory: Killed process 23734 (syz-executor.1) total-vm:73108kB, anon-rss:12708kB, file-rss:35844kB, shmem-rss:0kB, UID:0 pgtables:155648kB oom_score_adj:1000 08:34:19 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:19 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040002380000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:19 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x0, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1934.182864][T23774] IPVS: ftp: loaded support on port[0] = 21 08:34:19 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1934.283034][T23779] IPVS: ftp: loaded support on port[0] = 21 08:34:19 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1934.450736][T23792] IPVS: ftp: loaded support on port[0] = 21 [ 1934.519638][T23795] IPVS: ftp: loaded support on port[0] = 21 [ 1934.714135][T23785] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1934.758667][T23785] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1934.778667][T23785] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1934.820212][T23805] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1934.830524][T23805] CPU: 0 PID: 23805 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1934.838803][T23785] EXT4-fs (loop3): group descriptors corrupted! [ 1934.838870][T23805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1934.855494][T23805] Call Trace: [ 1934.858805][T23805] dump_stack+0x11d/0x181 [ 1934.863146][T23805] dump_header+0xaa/0x449 [ 1934.867546][T23805] oom_kill_process.cold+0x10/0x15 [ 1934.872660][T23805] out_of_memory+0x231/0xa00 [ 1934.877349][T23805] mem_cgroup_out_of_memory+0x128/0x150 [ 1934.883017][T23805] try_charge+0xb5c/0xbe0 [ 1934.887387][T23805] ? __rcu_read_unlock+0x10/0x3c0 [ 1934.892451][T23805] mem_cgroup_try_charge+0xd2/0x260 [ 1934.897672][T23805] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1934.903331][T23805] wp_page_copy+0x322/0x1120 [ 1934.907956][T23805] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1934.913700][T23805] do_wp_page+0x192/0x11f0 [ 1934.918145][T23805] __handle_mm_fault+0x1ab1/0x2c70 [ 1934.923306][T23805] ? __rb_rotate_set_parents+0x9a/0xf0 [ 1934.928815][T23805] handle_mm_fault+0x21b/0x530 [ 1934.933601][T23805] __do_page_fault+0x456/0x8d0 [ 1934.938384][T23805] do_page_fault+0x38/0x194 [ 1934.942909][T23805] page_fault+0x34/0x40 [ 1934.947085][T23805] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1934.953685][T23805] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1934.973384][T23805] RSP: 0018:ffffc9000ad17bc0 EFLAGS: 00010206 [ 1934.979569][T23805] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1934.987682][T23805] RDX: 0000000000001000 RSI: ffff888057440b00 RDI: 0000000020005000 [ 1934.995667][T23805] RBP: ffffc9000ad17bf8 R08: ffff888056753100 R09: 0000888056753c18 [ 1935.003701][T23805] R10: 00008880acc58448 R11: 0000888056753c1f R12: 0000000020004500 [ 1935.011720][T23805] R13: 0000000020005500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1935.019777][T23805] ? copyout+0xa5/0xb0 [ 1935.025089][T23805] copy_page_to_iter+0x254/0x8b0 [ 1935.028130][T23809] IPVS: ftp: loaded support on port[0] = 21 [ 1935.030225][T23805] pipe_to_user+0x71/0xc0 [ 1935.030250][T23805] __splice_from_pipe+0x248/0x480 [ 1935.045480][T23805] ? iter_to_pipe+0x3f0/0x3f0 [ 1935.050197][T23805] do_vmsplice.part.0+0x1c5/0x210 [ 1935.055248][T23805] __do_sys_vmsplice+0x15f/0x1c0 [ 1935.060283][T23805] ? __read_once_size+0x5a/0xe0 [ 1935.065157][T23805] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1935.070889][T23805] ? _copy_to_user+0x84/0xb0 [ 1935.075520][T23805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1935.081805][T23805] ? put_timespec64+0x94/0xc0 [ 1935.086636][T23805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1935.093001][T23805] __x64_sys_vmsplice+0x5e/0x80 [ 1935.097884][T23805] do_syscall_64+0xcc/0x370 [ 1935.102467][T23805] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1935.108730][T23805] RIP: 0033:0x45a679 08:34:20 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1935.112812][T23805] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1935.132821][T23805] RSP: 002b:00007ffbf6504c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1935.141325][T23805] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1935.149384][T23805] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1935.157792][T23805] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1935.165771][T23805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbf65056d4 [ 1935.173880][T23805] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1935.183456][T23805] memory: usage 307200kB, limit 307200kB, failcnt 1185 [ 1935.190373][T23805] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1935.197213][T23805] Memory cgroup stats for /syz1: [ 1935.197472][T23805] anon 293543936 [ 1935.197472][T23805] file 0 [ 1935.197472][T23805] kernel_stack 1585152 [ 1935.197472][T23805] slab 4599808 [ 1935.197472][T23805] sock 0 [ 1935.197472][T23805] shmem 0 08:34:20 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:20 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x0, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1935.197472][T23805] file_mapped 0 [ 1935.197472][T23805] file_dirty 0 [ 1935.197472][T23805] file_writeback 0 [ 1935.197472][T23805] anon_thp 281018368 [ 1935.197472][T23805] inactive_anon 69632 [ 1935.197472][T23805] active_anon 293543936 [ 1935.197472][T23805] inactive_file 122880 [ 1935.197472][T23805] active_file 98304 [ 1935.197472][T23805] unevictable 131072 [ 1935.197472][T23805] slab_reclaimable 1081344 [ 1935.197472][T23805] slab_unreclaimable 3518464 [ 1935.197472][T23805] pgfault 136158 [ 1935.197472][T23805] pgmajfault 0 [ 1935.197472][T23805] workingset_refault 0 [ 1935.197472][T23805] workingset_activate 0 [ 1935.197472][T23805] workingset_nodereclaim 0 [ 1935.197472][T23805] pgrefill 842 [ 1935.197472][T23805] pgscan 834 [ 1935.197472][T23805] pgsteal 90 [ 1935.291559][T23805] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23777,uid=0 [ 1935.307161][T23805] Memory cgroup out of memory: Killed process 23777 (syz-executor.1) total-vm:73108kB, anon-rss:12468kB, file-rss:35832kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 1935.334161][T23813] IPVS: ftp: loaded support on port[0] = 21 08:34:21 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040002d80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1935.509527][T23824] IPVS: ftp: loaded support on port[0] = 21 [ 1935.718705][T23834] IPVS: ftp: loaded support on port[0] = 21 [ 1935.763500][T23833] IPVS: ftp: loaded support on port[0] = 21 08:34:21 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:21 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1936.043376][T23839] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1936.071520][T23839] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1936.081707][T23839] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1936.092307][T23839] EXT4-fs (loop3): group descriptors corrupted! [ 1936.169561][T23852] IPVS: ftp: loaded support on port[0] = 21 [ 1936.194175][T23848] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1936.204449][T23848] CPU: 0 PID: 23848 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1936.212890][T23848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1936.222958][T23848] Call Trace: [ 1936.226290][T23848] dump_stack+0x11d/0x181 [ 1936.230650][T23848] dump_header+0xaa/0x449 [ 1936.235010][T23848] oom_kill_process.cold+0x10/0x15 [ 1936.240208][T23848] out_of_memory+0x231/0xa00 [ 1936.244888][T23848] mem_cgroup_out_of_memory+0x128/0x150 [ 1936.250471][T23848] try_charge+0xb5c/0xbe0 [ 1936.254826][T23848] ? __rcu_read_unlock+0x10/0x3c0 [ 1936.259919][T23848] mem_cgroup_try_charge+0xd2/0x260 [ 1936.265157][T23848] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1936.266082][T23855] IPVS: ftp: loaded support on port[0] = 21 [ 1936.270908][T23848] wp_page_copy+0x322/0x1120 [ 1936.270944][T23848] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1936.287164][T23848] do_wp_page+0x192/0x11f0 [ 1936.291666][T23848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1936.298043][T23848] ? debug_smp_processor_id+0x4c/0x172 [ 1936.303761][T23848] __handle_mm_fault+0x1ab1/0x2c70 [ 1936.308927][T23848] handle_mm_fault+0x21b/0x530 [ 1936.313759][T23848] __do_page_fault+0x456/0x8d0 [ 1936.318622][T23848] ? cgroup_rstat_updated+0xbe/0x1e0 [ 1936.323922][T23848] do_page_fault+0x38/0x194 [ 1936.328448][T23848] page_fault+0x34/0x40 [ 1936.332637][T23848] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1936.339327][T23848] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1936.359230][T23848] RSP: 0018:ffffc9000aeb3bc0 EFLAGS: 00010206 [ 1936.365304][T23848] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1936.373366][T23848] RDX: 0000000000001000 RSI: ffff888064300b00 RDI: 0000000020c1c000 [ 1936.381342][T23848] RBP: ffffc9000aeb3bf8 R08: ffff88805a6f9000 R09: 000088805a6f9b18 [ 1936.389318][T23848] R10: 0000c9000aee37e4 R11: 000088805a6f9b1f R12: 0000000020c1b500 [ 1936.397367][T23848] R13: 0000000020c1c500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1936.405374][T23848] ? copyout+0xa5/0xb0 [ 1936.409576][T23848] copy_page_to_iter+0x254/0x8b0 [ 1936.414622][T23848] pipe_to_user+0x71/0xc0 [ 1936.418975][T23848] __splice_from_pipe+0x248/0x480 [ 1936.424013][T23848] ? iter_to_pipe+0x3f0/0x3f0 [ 1936.428745][T23848] do_vmsplice.part.0+0x1c5/0x210 [ 1936.433802][T23848] __do_sys_vmsplice+0x15f/0x1c0 [ 1936.438754][T23848] ? __read_once_size+0x5a/0xe0 [ 1936.443664][T23848] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1936.449497][T23848] ? _copy_to_user+0x84/0xb0 [ 1936.454138][T23848] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1936.460397][T23848] ? put_timespec64+0x94/0xc0 [ 1936.465167][T23848] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1936.471415][T23848] __x64_sys_vmsplice+0x5e/0x80 [ 1936.476312][T23848] do_syscall_64+0xcc/0x370 [ 1936.480940][T23848] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1936.486836][T23848] RIP: 0033:0x45a679 [ 1936.490893][T23848] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1936.510718][T23848] RSP: 002b:00007ffbf6504c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1936.519150][T23848] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1936.527131][T23848] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1936.535135][T23848] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1936.543241][T23848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbf65056d4 [ 1936.551227][T23848] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1936.559774][T23848] memory: usage 307132kB, limit 307200kB, failcnt 1208 [ 1936.566702][T23848] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1936.573774][T23848] Memory cgroup stats for /syz1: [ 1936.573969][T23848] anon 293535744 [ 1936.573969][T23848] file 0 [ 1936.573969][T23848] kernel_stack 1622016 [ 1936.573969][T23848] slab 4599808 [ 1936.573969][T23848] sock 0 [ 1936.573969][T23848] shmem 0 [ 1936.573969][T23848] file_mapped 0 [ 1936.573969][T23848] file_dirty 0 [ 1936.573969][T23848] file_writeback 0 [ 1936.573969][T23848] anon_thp 281018368 [ 1936.573969][T23848] inactive_anon 69632 [ 1936.573969][T23848] active_anon 293535744 [ 1936.573969][T23848] inactive_file 122880 [ 1936.573969][T23848] active_file 98304 [ 1936.573969][T23848] unevictable 131072 [ 1936.573969][T23848] slab_reclaimable 1081344 [ 1936.573969][T23848] slab_unreclaimable 3518464 [ 1936.573969][T23848] pgfault 137082 [ 1936.573969][T23848] pgmajfault 0 [ 1936.573969][T23848] workingset_refault 0 [ 1936.573969][T23848] workingset_activate 0 [ 1936.573969][T23848] workingset_nodereclaim 0 [ 1936.573969][T23848] pgrefill 842 [ 1936.573969][T23848] pgscan 834 [ 1936.573969][T23848] pgsteal 90 [ 1936.667640][T23848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16872,uid=0 [ 1936.683157][T23848] Memory cgroup out of memory: Killed process 16872 (syz-executor.1) total-vm:73108kB, anon-rss:12468kB, file-rss:35824kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 08:34:22 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0x0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:22 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:22 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040003f80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:22 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:22 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:22 executing program 0: socket$netlink(0x10, 0x3, 0x12) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) set_mempolicy(0x0, 0x0, 0x0) inotify_init1(0xc00) mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0) timer_getoverrun(0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) mkdir(0x0, 0x0) tkill(r0, 0x800000000000014) [ 1937.002512][T23869] IPVS: ftp: loaded support on port[0] = 21 [ 1937.050534][T23872] IPVS: ftp: loaded support on port[0] = 21 [ 1937.336106][T23871] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1937.403207][T23891] IPVS: ftp: loaded support on port[0] = 21 [ 1937.502448][T23894] IPVS: ftp: loaded support on port[0] = 21 [ 1937.575273][T23871] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:34:23 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffa, 0x101040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x0, 0x4, 0x7f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x20000000}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) clock_adjtime(0x0, &(0x7f0000000140)={0x2, 0x2, 0xfffffffffffffffc, 0x101, 0x3, 0x2, 0x0, 0xee0, 0x400, 0x4, 0x4, 0x0, 0x3c, 0x2, 0x25f4, 0x80000000098d, 0x1, 0xe0, 0x615, 0x3, 0x10000, 0xff, 0x3, 0x1, 0x7, 0x100000010000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') socket$inet6_tcp(0xa, 0x1, 0x0) [ 1937.620359][T23871] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1937.644175][T23871] EXT4-fs (loop3): group descriptors corrupted! 08:34:23 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0x0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:23 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:23 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040004080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1938.053582][T23918] IPVS: ftp: loaded support on port[0] = 21 [ 1938.075011][T23919] IPVS: ftp: loaded support on port[0] = 21 08:34:23 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:23 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1938.342101][T23915] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 08:34:24 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffa, 0x101040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x0, 0x4, 0x7f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x20000000}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) clock_adjtime(0x0, &(0x7f0000000140)={0x2, 0x2, 0xfffffffffffffffc, 0x101, 0x3, 0x2, 0x0, 0xee0, 0x400, 0x4, 0x4, 0x0, 0x3c, 0x2, 0x25f4, 0x80000000098d, 0x1, 0xe0, 0x615, 0x3, 0x10000, 0xff, 0x3, 0x1, 0x7, 0x100000010000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') socket$inet6_tcp(0xa, 0x1, 0x0) [ 1938.398681][T23915] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1938.430999][T23915] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1938.466279][T23915] EXT4-fs (loop3): group descriptors corrupted! 08:34:24 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:24 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040004880000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1938.843447][T23949] IPVS: ftp: loaded support on port[0] = 21 [ 1938.846120][T23950] IPVS: ftp: loaded support on port[0] = 21 08:34:24 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0x0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) [ 1939.073701][T23955] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1939.110640][T23955] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1939.132262][T23964] IPVS: ftp: loaded support on port[0] = 21 [ 1939.181180][T23955] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1939.233892][T23955] EXT4-fs (loop3): group descriptors corrupted! [ 1939.420567][T23975] IPVS: ftp: loaded support on port[0] = 21 08:34:25 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x0) 08:34:25 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040014880000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:25 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1939.869673][T23989] IPVS: ftp: loaded support on port[0] = 21 08:34:25 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:25 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1940.100850][T23984] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 08:34:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x0) [ 1940.207753][T24002] IPVS: ftp: loaded support on port[0] = 21 [ 1940.212914][T24003] IPVS: ftp: loaded support on port[0] = 21 [ 1940.252076][T23984] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1940.340163][T23984] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:34:26 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:26 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r3, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1940.429231][T23984] EXT4-fs (loop3): group descriptors corrupted! [ 1940.629191][T24019] IPVS: ftp: loaded support on port[0] = 21 08:34:26 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040004c80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:26 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffa, 0x101040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x0, 0x4, 0x7f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x20000000}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x224c80) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x2, 0x2, 0xfffffffffffffffc, 0x101, 0x3, 0x2, 0x0, 0xee0, 0x400, 0x4, 0x4, 0x0, 0x3c, 0x2, 0x25f4, 0x80000000098d, 0x1, 0xe0, 0x619, 0x3, 0x10000, 0xff, 0x3, 0x1, 0x7, 0x100000010000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') [ 1940.908643][T24029] IPVS: ftp: loaded support on port[0] = 21 [ 1940.933285][T24030] IPVS: ftp: loaded support on port[0] = 21 [ 1941.024569][T24028] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1941.034910][T24028] CPU: 0 PID: 24028 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1941.043252][T24028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1941.053320][T24028] Call Trace: [ 1941.056630][T24028] dump_stack+0x11d/0x181 [ 1941.061052][T24028] dump_header+0xaa/0x449 [ 1941.065399][T24028] oom_kill_process.cold+0x10/0x15 [ 1941.070596][T24028] out_of_memory+0x231/0xa00 [ 1941.075206][T24028] mem_cgroup_out_of_memory+0x128/0x150 [ 1941.080861][T24028] try_charge+0xb5c/0xbe0 [ 1941.085293][T24028] ? __rcu_read_unlock+0x10/0x3c0 [ 1941.090565][T24028] mem_cgroup_try_charge+0xd2/0x260 [ 1941.095962][T24028] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1941.101758][T24028] wp_page_copy+0x322/0x1120 [ 1941.106342][T24028] ? debug_smp_processor_id+0x47/0x172 [ 1941.111832][T24028] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1941.120592][T24028] do_wp_page+0x192/0x11f0 [ 1941.125002][T24028] ? __udelay+0x10/0x20 [ 1941.129257][T24028] __handle_mm_fault+0x1ab1/0x2c70 [ 1941.134446][T24028] handle_mm_fault+0x21b/0x530 [ 1941.139299][T24028] __do_page_fault+0x456/0x8d0 [ 1941.144081][T24028] ? cgroup_rstat_updated+0xbe/0x1e0 [ 1941.149486][T24028] do_page_fault+0x38/0x194 [ 1941.154028][T24028] page_fault+0x34/0x40 [ 1941.158185][T24028] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1941.164827][T24028] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1941.184877][T24028] RSP: 0000:ffffc9000b41fbc0 EFLAGS: 00010206 [ 1941.190959][T24028] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1941.198973][T24028] RDX: 0000000000001000 RSI: ffff888067616b00 RDI: 00000000207ff000 [ 1941.207012][T24028] RBP: ffffc9000b41fbf8 R08: ffff888056753100 R09: 0000888056753c18 [ 1941.214979][T24028] R10: 0000000000000000 R11: 0000888056753c1f R12: 00000000207fe500 [ 1941.223713][T24028] R13: 00000000207ff500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1941.231785][T24028] ? copyout+0xa5/0xb0 [ 1941.235848][T24028] copy_page_to_iter+0x254/0x8b0 [ 1941.240978][T24028] pipe_to_user+0x71/0xc0 [ 1941.245298][T24028] __splice_from_pipe+0x248/0x480 [ 1941.250448][T24028] ? iter_to_pipe+0x3f0/0x3f0 [ 1941.255143][T24028] do_vmsplice.part.0+0x1c5/0x210 [ 1941.260284][T24028] __do_sys_vmsplice+0x15f/0x1c0 [ 1941.265406][T24028] ? __read_once_size+0x5a/0xe0 [ 1941.270337][T24028] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1941.276153][T24028] ? _copy_to_user+0x84/0xb0 [ 1941.280741][T24028] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1941.286992][T24028] ? put_timespec64+0x94/0xc0 [ 1941.291662][T24028] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1941.297987][T24028] __x64_sys_vmsplice+0x5e/0x80 [ 1941.302852][T24028] do_syscall_64+0xcc/0x370 [ 1941.307616][T24028] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1941.313604][T24028] RIP: 0033:0x45a679 [ 1941.317498][T24028] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1941.337181][T24028] RSP: 002b:00007ffbf6504c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1941.345714][T24028] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1941.354102][T24028] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1941.362104][T24028] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1941.370079][T24028] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbf65056d4 [ 1941.378325][T24028] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1941.386613][T24028] memory: usage 307200kB, limit 307200kB, failcnt 1254 [ 1941.394333][T24028] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1941.401220][T24028] Memory cgroup stats for /syz1: [ 1941.401402][T24028] anon 293318656 [ 1941.401402][T24028] file 0 [ 1941.401402][T24028] kernel_stack 1622016 [ 1941.401402][T24028] slab 4599808 [ 1941.401402][T24028] sock 0 08:34:27 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1941.401402][T24028] shmem 0 [ 1941.401402][T24028] file_mapped 0 [ 1941.401402][T24028] file_dirty 0 [ 1941.401402][T24028] file_writeback 0 [ 1941.401402][T24028] anon_thp 278921216 [ 1941.401402][T24028] inactive_anon 69632 [ 1941.401402][T24028] active_anon 293318656 [ 1941.401402][T24028] inactive_file 122880 [ 1941.401402][T24028] active_file 98304 [ 1941.401402][T24028] unevictable 131072 [ 1941.401402][T24028] slab_reclaimable 1081344 [ 1941.401402][T24028] slab_unreclaimable 3518464 [ 1941.401402][T24028] pgfault 138468 08:34:27 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1941.401402][T24028] pgmajfault 0 [ 1941.401402][T24028] workingset_refault 0 [ 1941.401402][T24028] workingset_activate 0 [ 1941.401402][T24028] workingset_nodereclaim 0 [ 1941.401402][T24028] pgrefill 842 [ 1941.401402][T24028] pgscan 834 [ 1941.401402][T24028] pgsteal 90 [ 1941.500455][T24028] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23991,uid=0 08:34:27 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1941.515941][T24028] Memory cgroup out of memory: Killed process 23991 (syz-executor.1) total-vm:73108kB, anon-rss:16564kB, file-rss:35840kB, shmem-rss:0kB, UID:0 pgtables:159744kB oom_score_adj:1000 08:34:27 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r3, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1941.846996][T24061] IPVS: ftp: loaded support on port[0] = 21 [ 1941.885422][T24063] IPVS: ftp: loaded support on port[0] = 21 [ 1941.935742][T24066] IPVS: ftp: loaded support on port[0] = 21 [ 1941.975559][T24040] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1942.008761][T24040] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1942.062208][T24040] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1942.079041][T24040] EXT4-fs (loop3): group descriptors corrupted! [ 1942.141026][T24075] IPVS: ftp: loaded support on port[0] = 21 08:34:27 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffa, 0x101040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x0, 0x4, 0x7f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x20000000}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x224c80) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x2, 0x2, 0xfffffffffffffffc, 0x101, 0x3, 0x2, 0x0, 0xee0, 0x400, 0x4, 0x4, 0x0, 0x3c, 0x2, 0x25f4, 0x80000000098d, 0x1, 0xe0, 0x619, 0x3, 0x10000, 0xff, 0x3, 0x1, 0x7, 0x100000010000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') 08:34:27 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040006080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:28 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:28 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1942.542259][T24084] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 08:34:28 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1942.603540][T24084] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1942.687349][T24084] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1942.735435][T24084] EXT4-fs (loop3): group descriptors corrupted! [ 1942.940531][T24105] IPVS: ftp: loaded support on port[0] = 21 [ 1943.007264][T24104] IPVS: ftp: loaded support on port[0] = 21 [ 1943.156453][T24113] IPVS: ftp: loaded support on port[0] = 21 08:34:28 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r3, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:28 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040006880000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x19}, 0x4e24, 0x4, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x0, r4, r5}, {0x3, 0x9, 0x800100000000000, 0x80, 0x1, 0x7, 0x1, 0x5}, {0x4, 0x2, 0x3, 0x4}, 0x125, 0x6e6bb1, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x3500, 0x1, 0x0, 0x0, 0x8000, 0x9ad, 0x7}}, 0xe8) socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r7, 0x805c6103, &(0x7f0000000080)) setresuid(0x0, r6, 0x0) setresuid(0x0, 0x0, 0x0) [ 1943.497495][T24121] IPVS: ftp: loaded support on port[0] = 21 08:34:29 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:29 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:29 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1943.684965][T24124] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1943.761095][T24124] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1943.788721][T24124] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1943.858425][T24140] IPVS: ftp: loaded support on port[0] = 21 [ 1943.899640][T24124] EXT4-fs (loop3): group descriptors corrupted! [ 1944.066745][T24148] IPVS: ftp: loaded support on port[0] = 21 [ 1944.128875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1944.134736][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1944.140582][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1944.146344][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1944.206742][T24152] IPVS: ftp: loaded support on port[0] = 21 08:34:29 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040096b80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:29 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x19}, 0x4e24, 0x4, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x0, r4, r5}, {0x3, 0x9, 0x800100000000000, 0x80, 0x1, 0x7, 0x1, 0x5}, {0x4, 0x2, 0x3, 0x4}, 0x125, 0x6e6bb1, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x3500, 0x1, 0x0, 0x0, 0x8000, 0x9ad, 0x7}}, 0xe8) socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r7, 0x805c6103, &(0x7f0000000080)) setresuid(0x0, r6, 0x0) setresuid(0x0, 0x0, 0x0) [ 1944.466457][T24160] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1944.483932][T24160] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1944.494199][T24160] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:34:30 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1944.561833][T24173] IPVS: ftp: loaded support on port[0] = 21 [ 1944.600475][T24160] EXT4-fs (loop3): group descriptors corrupted! 08:34:30 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:30 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040006c80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1944.885185][T24186] IPVS: ftp: loaded support on port[0] = 21 08:34:30 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x19}, 0x4e24, 0x4, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x0, r4, r5}, {0x3, 0x9, 0x800100000000000, 0x80, 0x1, 0x7, 0x1, 0x5}, {0x4, 0x2, 0x3, 0x4}, 0x125, 0x6e6bb1, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x3500, 0x1, 0x0, 0x0, 0x8000, 0x9ad, 0x7}}, 0xe8) socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r7, 0x805c6103, &(0x7f0000000080)) setresuid(0x0, r6, 0x0) setresuid(0x0, 0x0, 0x0) 08:34:30 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1945.118283][T24196] IPVS: ftp: loaded support on port[0] = 21 08:34:30 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1945.246715][T24191] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1945.259772][T24191] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:34:30 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1945.299396][T24191] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1945.336998][T24191] EXT4-fs (loop3): group descriptors corrupted! [ 1945.523764][T24212] IPVS: ftp: loaded support on port[0] = 21 [ 1945.525716][T24215] IPVS: ftp: loaded support on port[0] = 21 08:34:31 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1945.648712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.654637][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1945.660557][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.666317][ C0] protocol 88fb is buggy, dev hsr_slave_1 08:34:31 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040096c80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1945.850765][T24228] IPVS: ftp: loaded support on port[0] = 21 08:34:31 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x19}, 0x4e24, 0x4, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x0, r4, r5}, {0x3, 0x9, 0x800100000000000, 0x80, 0x1, 0x7, 0x1, 0x5}, {0x4, 0x2, 0x3, 0x4}, 0x125, 0x6e6bb1, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x3500, 0x1, 0x0, 0x0, 0x8000, 0x9ad, 0x7}}, 0xe8) socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r7, 0x805c6103, &(0x7f0000000080)) setresuid(0x0, r6, 0x0) setresuid(0x0, 0x0, 0x0) [ 1945.904779][T24225] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1945.916303][T24225] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1945.926417][T24225] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1945.937343][T24225] EXT4-fs (loop3): group descriptors corrupted! [ 1946.098652][T24239] IPVS: ftp: loaded support on port[0] = 21 08:34:31 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:31 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040007480000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:31 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x19}, 0x4e24, 0x4, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x0, r4, r5}, {0x3, 0x9, 0x800100000000000, 0x80, 0x1, 0x7, 0x1, 0x5}, {0x4, 0x2, 0x3, 0x4}, 0x125, 0x6e6bb1, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x3500, 0x1, 0x0, 0x0, 0x8000, 0x9ad, 0x7}}, 0xe8) socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r7, 0x805c6103, &(0x7f0000000080)) setresuid(0x0, r6, 0x0) setresuid(0x0, 0x0, 0x0) [ 1946.467602][T24247] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1946.535402][T24247] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1946.577713][T24262] IPVS: ftp: loaded support on port[0] = 21 [ 1946.649028][T24265] IPVS: ftp: loaded support on port[0] = 21 [ 1946.698684][T24247] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1946.725346][T24247] EXT4-fs (loop3): group descriptors corrupted! 08:34:32 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:32 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:32 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040007a80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1947.134636][T24281] IPVS: ftp: loaded support on port[0] = 21 [ 1947.144868][T24280] IPVS: ftp: loaded support on port[0] = 21 08:34:32 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7ffffffff000}}, 0x20, 0x0, 0x0) [ 1947.259480][T24289] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1947.279098][T24289] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1947.294940][T24289] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1947.305849][T24289] EXT4-fs (loop3): group descriptors corrupted! 08:34:32 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1947.541023][T24303] IPVS: ftp: loaded support on port[0] = 21 08:34:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7ffffffff000}}, 0x20, 0x0, 0x0) 08:34:33 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040c48080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:33 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1947.893385][T24315] IPVS: ftp: loaded support on port[0] = 21 08:34:33 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1948.018419][T24319] ptrace attach of "/root/syz-executor.0"[24314] was attempted by "/root/syz-executor.0"[24319] 08:34:33 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:33 executing program 0: [ 1948.216797][T24321] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1948.257872][T24330] IPVS: ftp: loaded support on port[0] = 21 [ 1948.352774][T24321] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1948.432557][T24321] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1948.449166][T24321] EXT4-fs (loop3): group descriptors corrupted! 08:34:34 executing program 0: [ 1948.549777][T24342] IPVS: ftp: loaded support on port[0] = 21 [ 1948.594386][T24343] IPVS: ftp: loaded support on port[0] = 21 [ 1948.677723][T24341] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1948.688067][T24341] CPU: 1 PID: 24341 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1948.696478][T24341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.706543][T24341] Call Trace: [ 1948.709932][T24341] dump_stack+0x11d/0x181 [ 1948.714344][T24341] dump_header+0xaa/0x449 [ 1948.720002][T24341] oom_kill_process.cold+0x10/0x15 08:34:34 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:34 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000004080c480000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1948.725200][T24341] out_of_memory+0x231/0xa00 [ 1948.729827][T24341] mem_cgroup_out_of_memory+0x128/0x150 [ 1948.735485][T24341] try_charge+0xb5c/0xbe0 [ 1948.739841][T24341] ? __rcu_read_unlock+0x10/0x3c0 [ 1948.744982][T24341] mem_cgroup_try_charge+0xd2/0x260 [ 1948.750421][T24341] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1948.756198][T24341] wp_page_copy+0x322/0x1120 [ 1948.760874][T24341] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1948.766620][T24341] do_wp_page+0x192/0x11f0 [ 1948.771065][T24341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1948.777402][T24341] ? debug_smp_processor_id+0x4c/0x172 [ 1948.783827][T24341] __handle_mm_fault+0x1ab1/0x2c70 [ 1948.788974][T24341] handle_mm_fault+0x21b/0x530 [ 1948.793832][T24341] __do_page_fault+0x456/0x8d0 [ 1948.798613][T24341] ? cgroup_rstat_updated+0xbe/0x1e0 [ 1948.803918][T24341] do_page_fault+0x38/0x194 [ 1948.808556][T24341] page_fault+0x34/0x40 [ 1948.812811][T24341] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1948.819482][T24341] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1948.839133][T24341] RSP: 0018:ffffc9000bfb3bc0 EFLAGS: 00010206 [ 1948.845305][T24341] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1948.853411][T24341] RDX: 0000000000001000 RSI: ffff888056d5bb00 RDI: 00000000207b2000 [ 1948.865396][T24341] RBP: ffffc9000bfb3bf8 R08: ffff88803f833040 R09: 000088803f833b58 [ 1948.873432][T24341] R10: 0000000000000000 R11: 000088803f833b5f R12: 00000000207b1500 [ 1948.881417][T24341] R13: 00000000207b2500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1948.889454][T24341] ? copyout+0xa5/0xb0 [ 1948.893545][T24341] copy_page_to_iter+0x254/0x8b0 [ 1948.898537][T24341] pipe_to_user+0x71/0xc0 [ 1948.902896][T24341] __splice_from_pipe+0x248/0x480 [ 1948.907975][T24341] ? iter_to_pipe+0x3f0/0x3f0 [ 1948.912709][T24341] do_vmsplice.part.0+0x1c5/0x210 [ 1948.917841][T24341] __do_sys_vmsplice+0x15f/0x1c0 [ 1948.922803][T24341] ? __read_once_size+0x5a/0xe0 08:34:34 executing program 0: [ 1948.927707][T24341] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1948.933492][T24341] ? _copy_to_user+0x84/0xb0 [ 1948.938104][T24341] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1948.944354][T24341] ? put_timespec64+0x94/0xc0 [ 1948.949043][T24341] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1948.955379][T24341] __x64_sys_vmsplice+0x5e/0x80 [ 1948.960250][T24341] do_syscall_64+0xcc/0x370 [ 1948.964766][T24341] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1948.970759][T24341] RIP: 0033:0x45a679 [ 1948.974670][T24341] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1948.994360][T24341] RSP: 002b:00007ffbf6504c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1949.003221][T24341] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1949.011387][T24341] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1949.019368][T24341] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1949.027377][T24341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbf65056d4 [ 1949.035355][T24341] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1949.043619][T24341] memory: usage 307200kB, limit 307200kB, failcnt 1301 [ 1949.050597][T24341] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1949.057586][T24341] Memory cgroup stats for /syz1: [ 1949.057821][T24341] anon 293044224 [ 1949.057821][T24341] file 0 [ 1949.057821][T24341] kernel_stack 1622016 [ 1949.057821][T24341] slab 5005312 [ 1949.057821][T24341] sock 0 08:34:34 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1949.057821][T24341] shmem 0 [ 1949.057821][T24341] file_mapped 0 [ 1949.057821][T24341] file_dirty 0 [ 1949.057821][T24341] file_writeback 0 [ 1949.057821][T24341] anon_thp 278921216 [ 1949.057821][T24341] inactive_anon 69632 [ 1949.057821][T24341] active_anon 293044224 [ 1949.057821][T24341] inactive_file 122880 [ 1949.057821][T24341] active_file 98304 [ 1949.057821][T24341] unevictable 131072 [ 1949.057821][T24341] slab_reclaimable 1216512 [ 1949.057821][T24341] slab_unreclaimable 3788800 [ 1949.057821][T24341] pgfault 139590 [ 1949.057821][T24341] pgmajfault 0 [ 1949.057821][T24341] workingset_refault 0 [ 1949.057821][T24341] workingset_activate 0 [ 1949.057821][T24341] workingset_nodereclaim 0 [ 1949.057821][T24341] pgrefill 842 [ 1949.057821][T24341] pgscan 834 [ 1949.057821][T24341] pgsteal 90 [ 1949.153359][T24341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=24306,uid=0 [ 1949.169220][T24341] Memory cgroup out of memory: Killed process 24306 (syz-executor.1) total-vm:73108kB, anon-rss:16564kB, file-rss:35824kB, shmem-rss:0kB, UID:0 pgtables:159744kB oom_score_adj:1000 [ 1949.194817][ T1070] oom_reaper: reaped process 24306 (syz-executor.1), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 1949.213558][T24360] IPVS: ftp: loaded support on port[0] = 21 [ 1949.268734][T24354] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1949.308701][T24354] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:34:34 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:34 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:34 executing program 0: [ 1949.319015][T24354] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1949.358452][T24354] EXT4-fs (loop3): group descriptors corrupted! [ 1949.499008][T24370] IPVS: ftp: loaded support on port[0] = 21 08:34:35 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:35 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000001000000010000000100000000400000004000ff80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1949.788664][T24386] IPVS: ftp: loaded support on port[0] = 21 [ 1949.814016][T24388] IPVS: ftp: loaded support on port[0] = 21 [ 1949.923390][T24392] IPVS: ftp: loaded support on port[0] = 21 08:34:35 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:35 executing program 0: [ 1950.042773][T24398] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1950.054023][T24398] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1950.064348][T24398] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1950.078638][T24398] EXT4-fs (loop3): group descriptors corrupted! 08:34:35 executing program 0: [ 1950.275178][T24411] IPVS: ftp: loaded support on port[0] = 21 08:34:36 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000400fff80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:36 executing program 0: 08:34:36 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:36 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:36 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:36 executing program 0: [ 1950.673030][T24418] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1950.724594][T24418] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1950.757210][T24418] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:34:36 executing program 0: [ 1950.790160][T24418] EXT4-fs (loop3): group descriptors corrupted! [ 1950.819716][T24435] IPVS: ftp: loaded support on port[0] = 21 [ 1950.941662][T24442] IPVS: ftp: loaded support on port[0] = 21 [ 1950.974539][T24444] IPVS: ftp: loaded support on port[0] = 21 08:34:36 executing program 0: 08:34:36 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:36 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000280000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:36 executing program 0: [ 1951.290254][T24455] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1951.303657][T24455] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1951.313830][T24455] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1951.395990][T24463] IPVS: ftp: loaded support on port[0] = 21 [ 1951.409045][T24455] EXT4-fs (loop3): group descriptors corrupted! 08:34:37 executing program 0: 08:34:37 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:37 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:37 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:37 executing program 0: 08:34:37 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000380000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1951.834396][T24481] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1951.866640][T24481] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1951.945094][T24493] IPVS: ftp: loaded support on port[0] = 21 [ 1951.986235][T24495] IPVS: ftp: loaded support on port[0] = 21 [ 1952.013578][T24488] IPVS: ftp: loaded support on port[0] = 21 [ 1952.014600][T24481] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1952.034349][T24481] EXT4-fs (loop3): group descriptors corrupted! 08:34:37 executing program 0: 08:34:37 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:37 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000480000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:37 executing program 0: [ 1952.334780][T24506] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1952.345956][T24506] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1952.355889][T24506] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1952.366892][T24506] EXT4-fs (loop3): group descriptors corrupted! 08:34:38 executing program 0: [ 1952.480992][T24514] IPVS: ftp: loaded support on port[0] = 21 08:34:38 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:38 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:38 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:38 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000580000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:38 executing program 0: [ 1952.966082][T24538] IPVS: ftp: loaded support on port[0] = 21 [ 1952.973983][T24539] IPVS: ftp: loaded support on port[0] = 21 [ 1953.035498][T24540] IPVS: ftp: loaded support on port[0] = 21 [ 1953.130988][T24527] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1953.158773][T24527] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1953.169710][T24527] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:34:38 executing program 0: 08:34:38 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x0, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1953.180969][T24527] EXT4-fs (loop3): group descriptors corrupted! 08:34:38 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000680000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:38 executing program 0: 08:34:39 executing program 0: [ 1953.545742][T24562] IPVS: ftp: loaded support on port[0] = 21 [ 1953.640814][T24559] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 08:34:39 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1953.769138][T24559] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1953.802142][T24559] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:34:39 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:39 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:39 executing program 0: [ 1953.829148][T24559] EXT4-fs (loop3): group descriptors corrupted! [ 1953.882045][T24572] IPVS: ftp: loaded support on port[0] = 21 [ 1954.052188][T24585] IPVS: ftp: loaded support on port[0] = 21 [ 1954.105985][T24588] IPVS: ftp: loaded support on port[0] = 21 08:34:39 executing program 0: 08:34:39 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000780000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:39 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x0, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:40 executing program 0: [ 1954.458069][T24599] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1954.487992][T24599] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1954.516423][T24599] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1954.534590][T24599] EXT4-fs (loop3): group descriptors corrupted! 08:34:40 executing program 0: [ 1954.602633][T24607] IPVS: ftp: loaded support on port[0] = 21 08:34:40 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:40 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:40 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:40 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000880000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) stat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in6=@dev, 0x4e24, 0x4, 0x0, 0x0, 0xa, 0x20, 0x80, 0x0, r2, r3}, {0x3, 0x9, 0x800100000000000, 0x0, 0x1, 0x7, 0x1, 0x5}, {0x4, 0x2, 0x3}, 0x125, 0x6e6bb1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6}, 0xa, @in6=@dev, 0x3500, 0x1, 0x0, 0x0, 0x8000, 0x9ad, 0x7}}, 0xe8) setresuid(0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) [ 1955.074905][T24627] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1955.075823][T24632] IPVS: ftp: loaded support on port[0] = 21 [ 1955.093849][T24627] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1955.119821][T24635] IPVS: ftp: loaded support on port[0] = 21 [ 1955.174499][T24640] IPVS: ftp: loaded support on port[0] = 21 [ 1955.207273][T24627] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 08:34:40 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x0, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1955.333219][T24627] EXT4-fs (loop3): group descriptors corrupted! 08:34:41 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) stat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in6=@dev, 0x4e24, 0x4, 0x0, 0x0, 0xa, 0x20, 0x80, 0x0, r2, r3}, {0x3, 0x9, 0x800100000000000, 0x0, 0x1, 0x7, 0x1, 0x5}, {0x4, 0x2, 0x3}, 0x125, 0x6e6bb1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6}, 0xa, @in6=@dev, 0x3500, 0x1, 0x0, 0x0, 0x8000, 0x9ad, 0x7}}, 0xe8) setresuid(0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 08:34:41 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000980000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1955.619847][T24655] IPVS: ftp: loaded support on port[0] = 21 08:34:41 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:41 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1955.841386][T24659] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1955.853249][T24659] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1955.863676][T24659] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1955.878483][T24659] EXT4-fs (loop3): group descriptors corrupted! 08:34:41 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffa, 0x101040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x0, 0x4, 0x7f) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000004c0)={{0xa, 0x4e20, 0x200, @mcast2, 0x9}, {0xa, 0x4e21, 0x7fffffff, @loopback, 0x120e}, 0x100, [0x100, 0xf7e, 0x3, 0x6, 0x800, 0x2, 0x56800000]}, 0x5c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x20000000}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x224c80) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x2, 0x2, 0xfffffffffffffffc, 0x101, 0x3, 0x2, 0x0, 0xee0, 0x400, 0x4, 0x4, 0x0, 0x3c, 0x2, 0x25f4, 0x80000000098d, 0x1, 0xe0, 0x619, 0x3, 0x10000, 0xff, 0x3, 0x1, 0x7, 0x100000010000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 08:34:41 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:41 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000a80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1956.081243][T24674] IPVS: ftp: loaded support on port[0] = 21 [ 1956.142159][T24679] IPVS: ftp: loaded support on port[0] = 21 [ 1956.335416][T24692] IPVS: ftp: loaded support on port[0] = 21 [ 1956.353946][T24683] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1956.405998][T24683] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1956.469285][T24683] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1956.485343][T24683] EXT4-fs (loop3): group descriptors corrupted! 08:34:42 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040002380000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:42 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:42 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:42 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1957.046703][T24707] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1957.064952][T24714] IPVS: ftp: loaded support on port[0] = 21 [ 1957.086643][T24707] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1957.113868][T24707] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1957.161481][T24707] EXT4-fs (loop3): group descriptors corrupted! [ 1957.177495][T24720] IPVS: ftp: loaded support on port[0] = 21 [ 1957.304762][T24725] IPVS: ftp: loaded support on port[0] = 21 08:34:43 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040002d80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:43 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffa, 0x101040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x0, 0x4, 0x7f) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000004c0)={{0xa, 0x4e20, 0x200, @mcast2, 0x9}, {0xa, 0x4e21, 0x7fffffff, @loopback, 0x120e}, 0x100, [0x100, 0xf7e, 0x3, 0x6, 0x800, 0x2, 0x56800000]}, 0x5c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x20000000}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x224c80) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x2, 0x2, 0xfffffffffffffffc, 0x101, 0x3, 0x2, 0x0, 0xee0, 0x400, 0x4, 0x4, 0x0, 0x3c, 0x2, 0x25f4, 0x80000000098d, 0x1, 0xe0, 0x619, 0x3, 0x10000, 0xff, 0x3, 0x1, 0x7, 0x100000010000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 08:34:43 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:43 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:43 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x0, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:43 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1958.009930][T24740] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1958.038835][T24750] IPVS: ftp: loaded support on port[0] = 21 [ 1958.050673][T24740] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1958.078664][T24740] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1958.097697][T24740] EXT4-fs (loop3): group descriptors corrupted! [ 1958.190330][T24761] IPVS: ftp: loaded support on port[0] = 21 [ 1958.194126][T24762] IPVS: ftp: loaded support on port[0] = 21 [ 1958.446845][T24771] IPVS: ftp: loaded support on port[0] = 21 08:34:44 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040004880000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1958.778211][T24775] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1958.815496][T24775] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:34:44 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:44 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x1000000) [ 1958.828661][T24775] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1958.839283][T24775] EXT4-fs (loop3): group descriptors corrupted! 08:34:44 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x0, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:44 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:44 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040004c80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1959.067467][T24792] IPVS: ftp: loaded support on port[0] = 21 08:34:44 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) [ 1959.323940][T24801] IPVS: ftp: loaded support on port[0] = 21 [ 1959.334900][T24809] IPVS: ftp: loaded support on port[0] = 21 [ 1959.508786][T24817] IPVS: ftp: loaded support on port[0] = 21 08:34:45 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(0x0, r0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000001480)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x1000000dd) mkdir(0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @broadcast}, {}, {0x2, 0x0, @dev}}) creat(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000001100)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000100)=""/4096, 0x1000}, 0xfffffe04) r3 = open(0x0, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) [ 1959.634592][T24805] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1959.670101][T24805] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1959.703786][T24805] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1959.728371][T24805] EXT4-fs (loop3): group descriptors corrupted! 08:34:45 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040006080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:45 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(0x0, r0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000001480)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x1000000dd) mkdir(0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @broadcast}, {}, {0x2, 0x0, @dev}}) creat(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000001100)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000100)=""/4096, 0x1000}, 0xfffffe04) r3 = open(0x0, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) 08:34:45 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:45 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x0, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1960.290571][T24836] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1960.316010][T24836] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1960.341435][T24846] IPVS: ftp: loaded support on port[0] = 21 [ 1960.418091][T24848] IPVS: ftp: loaded support on port[0] = 21 [ 1960.434649][T24836] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1960.508796][T24836] EXT4-fs (loop3): group descriptors corrupted! [ 1960.642388][T24851] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1960.663876][T24851] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1960.693010][T24851] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1960.720079][T24851] EXT4-fs (loop3): group descriptors corrupted! 08:34:46 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x0, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:46 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:46 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:46 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040006880000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:46 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:46 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x0, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1961.219767][T24865] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1961.232374][T24865] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1961.243445][T24865] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1961.259057][T24865] EXT4-fs (loop3): group descriptors corrupted! [ 1961.357790][T24890] IPVS: ftp: loaded support on port[0] = 21 [ 1961.373228][T24891] IPVS: ftp: loaded support on port[0] = 21 [ 1961.381317][T24893] IPVS: ftp: loaded support on port[0] = 21 [ 1961.394425][T24892] IPVS: ftp: loaded support on port[0] = 21 [ 1961.406757][T24894] IPVS: ftp: loaded support on port[0] = 21 08:34:47 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040006c80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1961.818070][T24899] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1961.841304][T24899] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1961.855301][T24899] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1961.866437][T24899] EXT4-fs (loop3): group descriptors corrupted! 08:34:47 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r3, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:47 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:47 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:47 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x0, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:47 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040007480000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:47 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1962.247023][T24914] IPVS: ftp: loaded support on port[0] = 21 [ 1962.514465][T24941] IPVS: ftp: loaded support on port[0] = 21 [ 1962.514587][T24940] IPVS: ftp: loaded support on port[0] = 21 [ 1962.529588][T24942] IPVS: ftp: loaded support on port[0] = 21 [ 1962.542718][T24932] IPVS: ftp: loaded support on port[0] = 21 [ 1962.606928][T24924] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1962.620087][T24924] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1962.667679][T24924] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1962.702200][T24924] EXT4-fs (loop3): group descriptors corrupted! 08:34:48 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040007a80000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1962.875637][T24953] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1962.898783][T24953] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:34:48 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r3, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1962.935812][T24953] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1962.949250][T24953] EXT4-fs (loop3): group descriptors corrupted! 08:34:48 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:48 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:48 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000400000ff000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:48 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x0, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:48 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1963.271846][T24968] IPVS: ftp: loaded support on port[0] = 21 [ 1963.405096][T24975] IPVS: ftp: loaded support on port[0] = 21 [ 1963.418935][T24976] IPVS: ftp: loaded support on port[0] = 21 [ 1963.570520][T24983] EXT4-fs (loop3): inodes count not valid: 128 vs 255 [ 1963.698381][T24994] IPVS: ftp: loaded support on port[0] = 21 [ 1963.737207][T24996] IPVS: ftp: loaded support on port[0] = 21 08:34:49 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000010000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:49 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1963.983640][T25003] EXT4-fs (loop3): inodes count not valid: 128 vs 16 08:34:49 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r3, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:49 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:49 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000000400000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1964.294556][T25018] IPVS: ftp: loaded support on port[0] = 21 [ 1964.369677][T25022] IPVS: ftp: loaded support on port[0] = 21 08:34:50 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:50 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1964.516212][T25019] EXT4-fs (loop3): inodes count not valid: 128 vs 16384 [ 1964.644212][T25036] IPVS: ftp: loaded support on port[0] = 21 [ 1964.769824][T25041] IPVS: ftp: loaded support on port[0] = 21 08:34:50 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080000048011308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:50 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x0, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1964.930811][T25050] IPVS: ftp: loaded support on port[0] = 21 [ 1964.945522][T25048] EXT4-fs (loop3): invalid inodes per group: 16384 [ 1964.945522][T25048] 08:34:50 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:50 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000100000001000000010000000040000000400000800000000a1308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1965.201352][T25061] IPVS: ftp: loaded support on port[0] = 21 08:34:50 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:51 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1965.457866][T25068] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1965.477298][T25075] IPVS: ftp: loaded support on port[0] = 21 [ 1965.505797][T25068] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1965.599559][T25080] IPVS: ftp: loaded support on port[0] = 21 [ 1965.599621][T25068] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1965.624424][T25068] EXT4-fs (loop3): group descriptors corrupted! [ 1965.635880][T25079] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1965.652489][T25079] CPU: 1 PID: 25079 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 1965.660873][T25079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.671076][T25079] Call Trace: [ 1965.674390][T25079] dump_stack+0x11d/0x181 [ 1965.678784][T25079] dump_header+0xaa/0x449 [ 1965.683140][T25079] oom_kill_process.cold+0x10/0x15 [ 1965.688301][T25079] out_of_memory+0x231/0xa00 [ 1965.692944][T25079] mem_cgroup_out_of_memory+0x128/0x150 [ 1965.698723][T25079] try_charge+0xb5c/0xbe0 [ 1965.698744][T25079] ? __rcu_read_unlock+0x10/0x3c0 [ 1965.698846][T25079] mem_cgroup_try_charge+0xd2/0x260 [ 1965.698967][T25079] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1965.723178][T25079] wp_page_copy+0x322/0x1120 [ 1965.728164][T25079] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1965.734098][T25079] do_wp_page+0x192/0x11f0 [ 1965.738532][T25079] ? __udelay+0x10/0x20 [ 1965.742760][T25079] __handle_mm_fault+0x1ab1/0x2c70 08:34:51 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1965.747915][T25079] handle_mm_fault+0x21b/0x530 [ 1965.753264][T25079] __do_page_fault+0x456/0x8d0 [ 1965.758164][T25079] ? cgroup_rstat_updated+0xbe/0x1e0 [ 1965.763480][T25079] do_page_fault+0x38/0x194 [ 1965.768020][T25079] page_fault+0x34/0x40 [ 1965.772241][T25079] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1965.779636][T25079] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1965.799381][T25079] RSP: 0018:ffffc90001c4bbc0 EFLAGS: 00010206 [ 1965.805457][T25079] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1965.814672][T25079] RDX: 0000000000001000 RSI: ffff88806e39eb00 RDI: 000000002072d000 [ 1965.822748][T25079] RBP: ffffc90001c4bbf8 R08: ffff8880528f30c0 R09: 00008880528f3bd8 [ 1965.830740][T25079] R10: 0000000000000000 R11: 00008880528f3bdf R12: 000000002072c500 [ 1965.838755][T25079] R13: 000000002072d500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1965.846787][T25079] ? copyout+0xa5/0xb0 [ 1965.850878][T25079] copy_page_to_iter+0x254/0x8b0 [ 1965.855874][T25079] pipe_to_user+0x71/0xc0 [ 1965.860228][T25079] __splice_from_pipe+0x248/0x480 [ 1965.865372][T25079] ? iter_to_pipe+0x3f0/0x3f0 [ 1965.870057][T25079] do_vmsplice.part.0+0x1c5/0x210 [ 1965.875095][T25079] __do_sys_vmsplice+0x15f/0x1c0 [ 1965.880037][T25079] ? __read_once_size+0x5a/0xe0 [ 1965.884912][T25079] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1965.890667][T25079] ? _copy_to_user+0x84/0xb0 [ 1965.895255][T25079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1965.901574][T25079] ? put_timespec64+0x94/0xc0 [ 1965.906261][T25079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1965.912526][T25079] __x64_sys_vmsplice+0x5e/0x80 [ 1965.917470][T25079] do_syscall_64+0xcc/0x370 [ 1965.922052][T25079] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1965.927975][T25079] RIP: 0033:0x45a679 [ 1965.932009][T25079] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1965.951747][T25079] RSP: 002b:00007ffbf6504c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1965.960166][T25079] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1965.968227][T25079] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1965.976195][T25079] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1965.984647][T25079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbf65056d4 [ 1965.992623][T25079] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1966.002487][T25079] memory: usage 307200kB, limit 307200kB, failcnt 1350 [ 1966.009540][T25079] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1966.016379][T25079] Memory cgroup stats for /syz1: [ 1966.016625][T25079] anon 292618240 [ 1966.016625][T25079] file 0 [ 1966.016625][T25079] kernel_stack 1622016 [ 1966.016625][T25079] slab 5681152 [ 1966.016625][T25079] sock 0 [ 1966.016625][T25079] shmem 0 [ 1966.016625][T25079] file_mapped 0 [ 1966.016625][T25079] file_dirty 0 [ 1966.016625][T25079] file_writeback 0 [ 1966.016625][T25079] anon_thp 278921216 [ 1966.016625][T25079] inactive_anon 69632 [ 1966.016625][T25079] active_anon 292618240 [ 1966.016625][T25079] inactive_file 122880 [ 1966.016625][T25079] active_file 98304 [ 1966.016625][T25079] unevictable 131072 [ 1966.016625][T25079] slab_reclaimable 1486848 [ 1966.016625][T25079] slab_unreclaimable 4194304 [ 1966.016625][T25079] pgfault 141438 [ 1966.016625][T25079] pgmajfault 0 [ 1966.016625][T25079] workingset_refault 0 [ 1966.016625][T25079] workingset_activate 0 [ 1966.016625][T25079] workingset_nodereclaim 0 [ 1966.016625][T25079] pgrefill 842 [ 1966.016625][T25079] pgscan 834 [ 1966.016625][T25079] pgsteal 90 [ 1966.111010][T25079] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=25043,uid=0 [ 1966.126679][T25079] Memory cgroup out of memory: Killed process 25043 (syz-executor.1) total-vm:73108kB, anon-rss:16564kB, file-rss:35844kB, shmem-rss:0kB, UID:0 pgtables:159744kB oom_score_adj:1000 08:34:51 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:51 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:52 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080020000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1966.465285][T25100] IPVS: ftp: loaded support on port[0] = 21 [ 1966.507304][T25103] IPVS: ftp: loaded support on port[0] = 21 [ 1966.549411][T25105] IPVS: ftp: loaded support on port[0] = 21 [ 1966.680769][T25112] IPVS: ftp: loaded support on port[0] = 21 [ 1966.734599][T25111] EXT4-fs (loop3): inodes count not valid: 128 vs 640 08:34:52 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080030000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:52 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1966.995638][T25122] EXT4-fs (loop3): inodes count not valid: 128 vs 896 [ 1967.210682][T25133] IPVS: ftp: loaded support on port[0] = 21 08:34:52 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080040000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:52 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:53 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:53 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1967.471360][T25137] EXT4-fs (loop3): inodes count not valid: 128 vs 1152 [ 1967.679145][T25151] IPVS: ftp: loaded support on port[0] = 21 08:34:53 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080050000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:53 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:53 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1967.925095][T25159] IPVS: ftp: loaded support on port[0] = 21 [ 1967.973376][T25160] IPVS: ftp: loaded support on port[0] = 21 [ 1968.184253][T25165] EXT4-fs (loop3): inodes count not valid: 128 vs 1408 [ 1968.270761][T25178] IPVS: ftp: loaded support on port[0] = 21 [ 1968.291460][T25177] IPVS: ftp: loaded support on port[0] = 21 08:34:54 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:54 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080060000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:54 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1968.749438][T25192] IPVS: ftp: loaded support on port[0] = 21 08:34:54 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1968.874696][T25189] EXT4-fs (loop3): inodes count not valid: 128 vs 1664 08:34:54 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1968.978234][T25199] EXT4-fs (loop3): inodes count not valid: 128 vs 1664 [ 1969.037839][T25206] IPVS: ftp: loaded support on port[0] = 21 08:34:54 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080070000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1969.107182][T25212] IPVS: ftp: loaded support on port[0] = 21 [ 1969.247555][T25218] IPVS: ftp: loaded support on port[0] = 21 08:34:55 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1969.414619][T25216] EXT4-fs (loop3): inodes count not valid: 128 vs 1920 [ 1969.822272][T25234] IPVS: ftp: loaded support on port[0] = 21 08:34:55 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:55 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080080000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:34:55 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:55 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:55 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1970.388906][T25243] EXT4-fs (loop3): inodes count not valid: 128 vs 2176 [ 1970.437176][T25254] IPVS: ftp: loaded support on port[0] = 21 [ 1970.495985][T25259] IPVS: ftp: loaded support on port[0] = 21 [ 1970.557040][T25262] IPVS: ftp: loaded support on port[0] = 21 08:34:56 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1970.824466][T25272] IPVS: ftp: loaded support on port[0] = 21 08:34:56 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x80) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x60, 0x8000000000000001}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080090000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1971.168136][T25282] IPVS: ftp: loaded support on port[0] = 21 08:34:56 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0x0, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:56 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:56 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) shmctl$SHM_LOCK(0x0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r4, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) 08:34:57 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1971.428817][T25280] EXT4-fs (loop3): inodes count not valid: 128 vs 2432 [ 1971.605673][T25303] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1971.616984][T25303] CPU: 0 PID: 25303 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0 [ 1971.625669][T25303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1971.628308][T25306] IPVS: ftp: loaded support on port[0] = 21 [ 1971.635911][T25303] Call Trace: [ 1971.635945][T25303] dump_stack+0x11d/0x181 [ 1971.635966][T25303] dump_header+0xaa/0x449 [ 1971.636036][T25303] oom_kill_process.cold+0x10/0x15 [ 1971.659260][T25303] out_of_memory+0x231/0xa00 [ 1971.664323][T25303] mem_cgroup_out_of_memory+0x128/0x150 [ 1971.670942][T25303] try_charge+0xb5c/0xbe0 [ 1971.675344][T25303] ? __rcu_read_unlock+0x10/0x3c0 [ 1971.680487][T25303] mem_cgroup_try_charge+0xd2/0x260 [ 1971.685752][T25303] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1971.691674][T25303] wp_page_copy+0x322/0x1120 [ 1971.696294][T25303] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1971.702093][T25303] do_wp_page+0x192/0x11f0 [ 1971.706538][T25303] ? __udelay+0x10/0x20 [ 1971.711062][T25303] __handle_mm_fault+0x1ab1/0x2c70 [ 1971.716702][T25303] handle_mm_fault+0x21b/0x530 [ 1971.721642][T25303] __do_page_fault+0x456/0x8d0 [ 1971.726408][T25303] ? cgroup_rstat_updated+0xbe/0x1e0 [ 1971.731691][T25303] do_page_fault+0x38/0x194 [ 1971.736225][T25303] page_fault+0x34/0x40 [ 1971.740471][T25303] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1971.747100][T25303] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1971.766746][T25303] RSP: 0018:ffffc90003743bc0 EFLAGS: 00010206 [ 1971.772801][T25303] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1971.780764][T25303] RDX: 0000000000001000 RSI: ffff888055b08b00 RDI: 0000000020921000 [ 1971.790375][T25303] RBP: ffffc90003743bf8 R08: ffff88807c909000 R09: 000088807c909b18 [ 1971.798564][T25303] R10: 0000000000000001 R11: 000088807c909b1f R12: 0000000020920500 [ 1971.806548][T25303] R13: 0000000020921500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1971.815411][T25303] ? copyout+0xa5/0xb0 [ 1971.819479][T25303] copy_page_to_iter+0x254/0x8b0 [ 1971.824424][T25303] pipe_to_user+0x71/0xc0 [ 1971.828856][T25303] __splice_from_pipe+0x248/0x480 [ 1971.834678][T25303] ? iter_to_pipe+0x3f0/0x3f0 [ 1971.839448][T25303] do_vmsplice.part.0+0x1c5/0x210 [ 1971.844525][T25303] __do_sys_vmsplice+0x15f/0x1c0 [ 1971.849462][T25303] ? __read_once_size+0x5a/0xe0 [ 1971.854306][T25303] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1971.860138][T25303] ? _copy_to_user+0x84/0xb0 [ 1971.864760][T25303] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1971.871016][T25303] ? put_timespec64+0x94/0xc0 [ 1971.875766][T25303] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1971.882622][T25303] __x64_sys_vmsplice+0x5e/0x80 [ 1971.887471][T25303] do_syscall_64+0xcc/0x370 [ 1971.891971][T25303] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1971.897852][T25303] RIP: 0033:0x45a679 [ 1971.901837][T25303] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1971.921527][T25303] RSP: 002b:00007f7d3f039c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1971.930537][T25303] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1971.938528][T25303] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1971.946518][T25303] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 08:34:57 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x2d7) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x140040, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000480)={0x6, &(0x7f0000000240)=[{0x0, 0x0, 0x5, 0x1}, {0xc94, 0x8, 0x2, 0x800}, {0x1f, 0x9b, 0x5, 0x80000000}, {0x0, 0x1}, {0x1000, 0x3, 0xe0, 0xa9b}, {0x7fe, 0x3, 0x5, 0x7e8c}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xa3d, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='y.im\x00', 0x0, 0x0, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x8}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x30, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x10, 0xd80000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r5, 0x0) clone(0x42102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/175, 0xaf) [ 1971.954830][T25303] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d3f03a6d4 [ 1971.962814][T25303] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1971.971286][T25303] memory: usage 307200kB, limit 307200kB, failcnt 92 [ 1971.978368][T25303] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1971.985509][T25303] Memory cgroup stats for /syz2: [ 1971.985710][T25303] anon 304615424 [ 1971.985710][T25303] file 909312 [ 1971.985710][T25303] kernel_stack 405504 [ 1971.985710][T25303] slab 4104192 [ 1971.985710][T25303] sock 20480 [ 1971.985710][T25303] shmem 704512 [ 1971.985710][T25303] file_mapped 0 [ 1971.985710][T25303] file_dirty 135168 [ 1971.985710][T25303] file_writeback 0 [ 1971.985710][T25303] anon_thp 299892736 [ 1971.985710][T25303] inactive_anon 135168 [ 1971.985710][T25303] active_anon 305401856 [ 1971.985710][T25303] inactive_file 135168 [ 1971.985710][T25303] active_file 102400 [ 1971.985710][T25303] unevictable 0 [ 1971.985710][T25303] slab_reclaimable 1351680 [ 1971.985710][T25303] slab_unreclaimable 2752512 [ 1971.985710][T25303] pgfault 154902 [ 1971.985710][T25303] pgmajfault 0 [ 1971.985710][T25303] workingset_refault 0 [ 1971.985710][T25303] workingset_activate 0 [ 1971.985710][T25303] workingset_nodereclaim 0 [ 1971.985710][T25303] pgrefill 89 [ 1971.985710][T25303] pgscan 89 [ 1971.985710][T25303] pgsteal 84 [ 1972.028053][T25309] IPVS: ftp: loaded support on port[0] = 21 [ 1972.080992][T25303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14864,uid=0 [ 1972.102887][T25303] Memory cgroup out of memory: Killed process 14864 (syz-executor.2) total-vm:73108kB, anon-rss:16568kB, file-rss:35896kB, shmem-rss:0kB, UID:0 pgtables:172032kB oom_score_adj:1000 [ 1972.644337][T25303] ================================================================== [ 1972.652570][T25303] BUG: KCSAN: data-race in inactive_list_is_low / snapshot_refaults [ 1972.660536][T25303] [ 1972.662962][T25303] read to 0xffff8880a27ccc78 of 8 bytes by task 25287 on cpu 1: [ 1972.671390][T25303] inactive_list_is_low+0x1d4/0x450 [ 1972.676598][T25303] shrink_node_memcg+0x599/0xf80 [ 1972.681532][T25303] shrink_node+0x164/0xb30 [ 1972.686904][T25303] do_try_to_free_pages+0x242/0x940 [ 1972.692194][T25303] try_to_free_mem_cgroup_pages+0x1fd/0x4c0 [ 1972.698090][T25303] try_charge+0x479/0xbe0 [ 1972.702424][T25303] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 1972.707891][T25303] __memcg_kmem_charge+0xde/0x240 [ 1972.712922][T25303] __alloc_pages_nodemask+0x26c/0x310 [ 1972.718379][T25303] alloc_pages_current+0xd1/0x170 [ 1972.723502][T25303] pte_alloc_one+0x18/0x50 [ 1972.728099][T25303] __pte_alloc+0x2d/0x220 [ 1972.732433][T25303] __handle_mm_fault+0x29a2/0x2c70 [ 1972.737544][T25303] handle_mm_fault+0x21b/0x530 [ 1972.742303][T25303] __do_page_fault+0x456/0x8d0 [ 1972.747060][T25303] do_page_fault+0x38/0x194 [ 1972.751571][T25303] page_fault+0x34/0x40 [ 1972.755726][T25303] [ 1972.758070][T25303] write to 0xffff8880a27ccc78 of 8 bytes by task 25303 on cpu 0: [ 1972.765804][T25303] snapshot_refaults+0x170/0x200 [ 1972.770857][T25303] do_try_to_free_pages+0x6e8/0x940 [ 1972.776194][T25303] try_to_free_mem_cgroup_pages+0x1fd/0x4c0 [ 1972.782188][T25303] try_charge+0x479/0xbe0 [ 1972.786523][T25303] mem_cgroup_try_charge+0xd2/0x260 [ 1972.791745][T25303] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1972.797401][T25303] wp_page_copy+0x322/0x1120 [ 1972.802040][T25303] do_wp_page+0x192/0x11f0 [ 1972.806527][T25303] __handle_mm_fault+0x1ab1/0x2c70 [ 1972.811658][T25303] handle_mm_fault+0x21b/0x530 [ 1972.817148][T25303] __do_page_fault+0x456/0x8d0 [ 1972.822442][T25303] do_page_fault+0x38/0x194 [ 1972.827073][T25303] page_fault+0x34/0x40 [ 1972.831273][T25303] copy_user_enhanced_fast_string+0xe/0x30 [ 1972.837084][T25303] copy_page_to_iter+0x254/0x8b0 [ 1972.842108][T25303] pipe_to_user+0x71/0xc0 [ 1972.846460][T25303] __splice_from_pipe+0x248/0x480 [ 1972.851615][T25303] do_vmsplice.part.0+0x1c5/0x210 [ 1972.856669][T25303] __do_sys_vmsplice+0x15f/0x1c0 [ 1972.861644][T25303] __x64_sys_vmsplice+0x5e/0x80 [ 1972.867115][T25303] do_syscall_64+0xcc/0x370 [ 1972.871747][T25303] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1972.877633][T25303] [ 1972.879988][T25303] Reported by Kernel Concurrency Sanitizer on: [ 1972.886173][T25303] CPU: 0 PID: 25303 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0 [ 1972.894938][T25303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.905000][T25303] ================================================================== [ 1972.913097][T25303] Kernel panic - not syncing: panic_on_warn set ... [ 1972.919736][T25303] CPU: 0 PID: 25303 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0 [ 1972.928201][T25303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.938372][T25303] Call Trace: [ 1972.941680][T25303] dump_stack+0x11d/0x181 [ 1972.946160][T25303] panic+0x210/0x640 [ 1972.950072][T25303] ? vprintk_func+0x8d/0x140 [ 1972.954841][T25303] kcsan_report.cold+0xc/0xd [ 1972.959452][T25303] kcsan_setup_watchpoint+0x3fe/0x460 [ 1972.964836][T25303] __tsan_unaligned_write8+0xc4/0x100 [ 1972.970356][T25303] snapshot_refaults+0x170/0x200 [ 1972.975321][T25303] do_try_to_free_pages+0x6e8/0x940 [ 1972.980711][T25303] try_to_free_mem_cgroup_pages+0x1fd/0x4c0 [ 1972.986645][T25303] ? cgroup_file_notify+0xff/0x130 [ 1972.991776][T25303] try_charge+0x479/0xbe0 [ 1972.996118][T25303] ? __rcu_read_unlock+0x11/0x3c0 [ 1973.001163][T25303] mem_cgroup_try_charge+0xd2/0x260 [ 1973.006476][T25303] mem_cgroup_try_charge_delay+0x3a/0x80 [ 1973.012126][T25303] wp_page_copy+0x322/0x1120 [ 1973.016817][T25303] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1973.022547][T25303] do_wp_page+0x192/0x11f0 [ 1973.026967][T25303] ? osq_unlock+0x45/0x120 [ 1973.031397][T25303] __handle_mm_fault+0x1ab1/0x2c70 [ 1973.036535][T25303] handle_mm_fault+0x21b/0x530 [ 1973.041312][T25303] __do_page_fault+0x456/0x8d0 [ 1973.046092][T25303] ? cgroup_rstat_updated+0xbe/0x1e0 [ 1973.051397][T25303] do_page_fault+0x38/0x194 [ 1973.055910][T25303] page_fault+0x34/0x40 [ 1973.060068][T25303] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1973.066673][T25303] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1973.086273][T25303] RSP: 0018:ffffc90003743bc0 EFLAGS: 00010206 [ 1973.092334][T25303] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 1973.100398][T25303] RDX: 0000000000001000 RSI: ffff888055b08b00 RDI: 0000000020923000 [ 1973.108385][T25303] RBP: ffffc90003743bf8 R08: ffff88807c909000 R09: 000088807c909b18 [ 1973.116371][T25303] R10: 0000000000000001 R11: 000088807c909b1f R12: 0000000020922500 [ 1973.124355][T25303] R13: 0000000020923500 R14: 0000000000000000 R15: 00007ffffffff000 [ 1973.132362][T25303] ? copyout+0xa5/0xb0 [ 1973.136478][T25303] copy_page_to_iter+0x254/0x8b0 [ 1973.141548][T25303] pipe_to_user+0x71/0xc0 [ 1973.145912][T25303] __splice_from_pipe+0x248/0x480 [ 1973.150947][T25303] ? iter_to_pipe+0x3f0/0x3f0 [ 1973.155686][T25303] do_vmsplice.part.0+0x1c5/0x210 [ 1973.160733][T25303] __do_sys_vmsplice+0x15f/0x1c0 [ 1973.165695][T25303] ? __read_once_size+0x5a/0xe0 [ 1973.170561][T25303] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1973.176294][T25303] ? _copy_to_user+0x84/0xb0 [ 1973.180896][T25303] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1973.187178][T25303] ? put_timespec64+0x94/0xc0 [ 1973.191906][T25303] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1973.198162][T25303] __x64_sys_vmsplice+0x5e/0x80 [ 1973.203135][T25303] do_syscall_64+0xcc/0x370 [ 1973.207678][T25303] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1973.213585][T25303] RIP: 0033:0x45a679 [ 1973.217494][T25303] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1973.237205][T25303] RSP: 002b:00007f7d3f039c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1973.245628][T25303] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 1973.253866][T25303] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1973.261836][T25303] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1973.269807][T25303] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d3f03a6d4 [ 1973.277798][T25303] R13: 00000000004cb13f R14: 00000000004e48d8 R15: 00000000ffffffff [ 1973.287382][T25303] Kernel Offset: disabled [ 1973.291854][T25303] Rebooting in 86400 seconds..