t4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:16 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10101, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) fcntl$setsig(r1, 0xa, 0x38) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1067.148976][ T8190] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:17 executing program 4 (fault-call:0 fault-nth:2): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:17 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x135, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:17 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x125, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1067.295194][ T8190] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) [ 1067.401443][ T8221] FAULT_INJECTION: forcing a failure. [ 1067.401443][ T8221] name failslab, interval 1, probability 0, space 0, times 0 15:54:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xa, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1067.480490][ T8221] CPU: 0 PID: 8221 Comm: syz-executor.4 Not tainted 5.0.0-rc7-next-20190222 #41 [ 1067.489533][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1067.499573][ T8221] Call Trace: [ 1067.502855][ T8221] dump_stack+0x172/0x1f0 [ 1067.507178][ T8221] should_fail.cold+0xa/0x15 [ 1067.511786][ T8221] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1067.517580][ T8221] ? ___might_sleep+0x163/0x280 [ 1067.522419][ T8221] __should_failslab+0x121/0x190 [ 1067.527344][ T8221] should_failslab+0x9/0x14 [ 1067.531843][ T8221] kmem_cache_alloc+0x2b2/0x6f0 [ 1067.536704][ T8221] ? current_time+0x6b/0x140 [ 1067.541283][ T8221] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 1067.547078][ T8221] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1067.552359][ T8221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.558587][ T8221] ? timespec64_trunc+0xf0/0x180 [ 1067.563524][ T8221] __d_alloc+0x2e/0x8c0 [ 1067.567674][ T8221] d_alloc_pseudo+0x1e/0x30 [ 1067.572168][ T8221] alloc_file_pseudo+0xe2/0x280 [ 1067.577010][ T8221] ? alloc_file+0x4d0/0x4d0 [ 1067.581507][ T8221] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1067.588214][ T8221] __shmem_file_setup.part.0+0x108/0x2b0 [ 1067.593853][ T8221] shmem_file_setup+0x66/0x90 [ 1067.598519][ T8221] __x64_sys_memfd_create+0x2a2/0x470 [ 1067.603886][ T8221] ? memfd_fcntl+0x1550/0x1550 [ 1067.608638][ T8221] ? do_syscall_64+0x26/0x610 [ 1067.613312][ T8221] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1067.618584][ T8221] ? trace_hardirqs_on+0x67/0x230 [ 1067.623598][ T8221] do_syscall_64+0x103/0x610 [ 1067.628210][ T8221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1067.634153][ T8221] RIP: 0033:0x457e29 [ 1067.638055][ T8221] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1067.657650][ T8221] RSP: 002b:00007f2b42974a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1067.666045][ T8221] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457e29 15:54:17 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x136, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1067.673999][ T8221] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bce27 [ 1067.681961][ T8221] RBP: 000000000073bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 1067.689926][ T8221] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f2b429756d4 [ 1067.697893][ T8221] R13: 00000000004c66d4 R14: 00000000004dbc78 R15: 0000000000000003 15:54:17 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x126, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1067.838038][ T8232] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:17 executing program 4 (fault-call:0 fault-nth:3): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:17 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x137, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:18 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000001c0)=0x2, 0x8b, 0x2, 0x0, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{}]}) recvmmsg(r2, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x22f0b9f0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000780)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xfffffe4f) bind$can_raw(r2, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) [ 1068.199187][ T8256] FAULT_INJECTION: forcing a failure. [ 1068.199187][ T8256] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.265983][ T8263] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) [ 1068.282789][ T8256] CPU: 1 PID: 8256 Comm: syz-executor.4 Not tainted 5.0.0-rc7-next-20190222 #41 [ 1068.291820][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1068.301875][ T8256] Call Trace: [ 1068.305168][ T8256] dump_stack+0x172/0x1f0 [ 1068.309504][ T8256] should_fail.cold+0xa/0x15 [ 1068.314109][ T8256] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1068.319927][ T8256] ? ___might_sleep+0x163/0x280 [ 1068.324783][ T8256] __should_failslab+0x121/0x190 [ 1068.329719][ T8256] should_failslab+0x9/0x14 [ 1068.334269][ T8256] kmem_cache_alloc+0x2b2/0x6f0 [ 1068.339155][ T8256] __alloc_file+0x27/0x300 [ 1068.343564][ T8256] alloc_empty_file+0x72/0x170 [ 1068.348339][ T8256] alloc_file+0x5e/0x4d0 [ 1068.352580][ T8256] alloc_file_pseudo+0x189/0x280 [ 1068.357531][ T8256] ? alloc_file+0x4d0/0x4d0 [ 1068.362043][ T8256] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1068.368287][ T8256] __shmem_file_setup.part.0+0x108/0x2b0 [ 1068.373945][ T8256] shmem_file_setup+0x66/0x90 [ 1068.378626][ T8256] __x64_sys_memfd_create+0x2a2/0x470 [ 1068.384023][ T8256] ? memfd_fcntl+0x1550/0x1550 [ 1068.388796][ T8256] ? do_syscall_64+0x26/0x610 [ 1068.393471][ T8256] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1068.398838][ T8256] ? trace_hardirqs_on+0x67/0x230 [ 1068.403862][ T8256] do_syscall_64+0x103/0x610 [ 1068.408460][ T8256] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1068.414360][ T8256] RIP: 0033:0x457e29 [ 1068.418289][ T8256] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1068.437917][ T8256] RSP: 002b:00007f2b42974a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1068.446333][ T8256] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457e29 [ 1068.454303][ T8256] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bce27 15:54:18 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:18 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x127, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1068.462271][ T8256] RBP: 000000000073bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 1068.470245][ T8256] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f2b429756d4 [ 1068.478243][ T8256] R13: 00000000004c66d4 R14: 00000000004dbc78 R15: 0000000000000003 [ 1068.585837][ T8263] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:18 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x128, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:18 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x138, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1068.898697][ T8300] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:18 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x8) r3 = epoll_create1(0xc0000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1069.024745][ T8300] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:19 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x139, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:19 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x129, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x23, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:19 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:19 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:19 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0x100000103, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x4, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x5, 0xffffffffffffffff, 0x1) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:19 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x12a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1069.730861][ T8367] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:19 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1069.865467][ T8367] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:19 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x12b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2d, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:20 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:20 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1070.233488][ T8417] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) [ 1070.253460][ T8411] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:20 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1070.375563][ T8411] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1070.484210][ T8411] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1070.498983][ T8417] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) [ 1070.578077][ T8411] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1070.693307][ T8411] EXT4-fs (loop4): get root inode failed [ 1070.740285][ T8411] EXT4-fs (loop4): mount failed 15:54:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='\nxt4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:20 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x12c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x48, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:20 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:20 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_create1(0x80000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:21 executing program 3: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1071.139255][ T8484] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:21 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x12d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:21 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1071.386863][ T8484] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4c, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1071.518661][ C1] net_ratelimit: 26 callbacks suppressed [ 1071.518668][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.530168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1071.535955][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.541759][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:54:21 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x12e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:21 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:21 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_create1(0x80000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1071.956377][ T8535] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='%xt4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1072.158688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1072.164501][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1072.170402][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1072.176156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1072.182038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1072.187801][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:54:22 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x140, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x60, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:22 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x12f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:22 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x1000000010000011, 0x4000000040080002, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f00000001c0)='\x06\x99\xfc\x0f\x81\"\xb0u\xf4>Z$\xd9\xf2\x8frdma.cur\x88ent\xea_\x9a\x8e\x85\x1bUw\x86\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='mxt4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1072.624483][ T8580] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:22 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_create1(0x80000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:22 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x141, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='e\nt4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:22 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x130, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x68, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1073.110400][ T8620] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:23 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x131, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:23 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x142, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1073.301909][ T8620] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:23 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, 0x80000001, 0x7, 0xfff}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6c, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='e%t4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:23 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x143, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:23 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1073.737758][ T8676] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:23 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x132, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:23 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x144, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1073.935483][ T8676] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ex\n4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x74, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x133, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:24 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_read_part_table(0x0, 0x8, &(0x7f0000000b80)=[{&(0x7f0000000680)="b6a2c25ef9745bd78bfcb40e43a528f8fed783f61f90e99daf446a7c945880346fa3e275db44a7910cf21296d8344a1fcd361648200ed3d20f38ec55164be161b9dc1c397affb12efa3746ae77beb56b7bb212fcd86dfdda96d241a20ab8838984d02724f2a5dfdbcaf89b301e43e8475d50618655f90c4204f14a12e48a73dd92ca197d828aa8f9128f452401a8b4a3831f4f7524fe67ae0dd8b3928bba30c98778d90fe08174862ce6b9f34af7e1044ecf5e4d515536defb158fd061", 0xbd, 0x6}, {&(0x7f0000000740)="37817c3cbacfb935d8afceec8ec1a4822bb298cff43845f9dac3da01c188a50c9b416779333d6b7870c6ac0c4f0ecd977b80b9aac75285676eec20225bd26ea133f2181692b3c131a3b62eadacc04d1a3946754c8075b4829255732789467a3853beb4d21396fbee8e3a809c5f1e099f196e0173ad3ce84003bba7e69135d82ef71a9b9b2b0b31bcb73ea0d0940cc302cd1176cd9c5e3c0d0d02d4a5f9", 0x9d, 0x7ba}, {&(0x7f0000000800)="c5ed5b5dd6a125a2e8efa7cdbb3382fae6d0453e28e124b7dc543246472f51908a323b116a8ef8ddcb034dd6716f59a043fa31dfcbaf4e6fff778c968927cd8b98837032d7", 0x45, 0x4}, {&(0x7f0000000880)="1ae2440629e62c544b7c0524e6e5ae736b7ca7a3616653eb752276c2ef5d3e1b794c3cf26aabcded291167b43442e0badd9a510279a11256c5615c172a28f0b8eda2ec34dbb4cbec89f3168fdf8ac05c15cbfd95225b5a4af11d62722abe7e85c7b570c2076ec987d8aa90a8c769716f5f12fdb67c59e442831867e2b81270adf5dc0c", 0x83, 0x1f}, {&(0x7f0000000040)="2034db90e2bb2b174936cf800a325700db486b74e0774cdc7597ebfb5672576abc7629e801ca506c7fb236fbd27c7c4ffe9cb831c8", 0x35, 0x200}, {&(0x7f0000000940)="849b7d2c9739d9ad4618d31b1a640c5ef86cd7eb2805557f1ba7a7d6149dcb47aa3258cab57cd0a8b5071802b09c5b7ec24b486c74672d5c6970955106fab7a85e2893af71cd4d127d74256cce74b19cdd8c7ae0f2f1785cc7b987ebda307e403cf3447906372d089160f4136071714860dcd832aa8ec8b64e", 0x79, 0xb957}, {&(0x7f00000009c0)="9c76e4d35bdf7ed295cf3b585263e134c09e582a5bcdf6b884e0e0aacdffa9ab3bba3f976fa69ab63db5159a4e12d3790240639757f6913f33e6040bbe737efa7ae9e032478454d26558566e5136b0a1ee8557354192853557f1dbdda0f934cd60810693397e802cc698a817bf72a403ec7569777ed2ffd4255d8518f7b4a3bd518a445f9d8db4149e0beeeb8323b5ec2e0ae61596861c8fc300f642372664f186c33161b1d85ee576e431d8", 0xac, 0xffffffffffff0000}, {&(0x7f0000000a80)="151ad65596b45dcf19dc85d29cd6a12e5ef1aedd9cdd4a46183a7c2d00cf0d64446aabf756d553b9e0ad263920caed52ecc2fd45bf761e07f7915077a787a9d55a25f22b21c0b8605465c933b69641e667fe66a912e2de44fde92fb75928da84c5ab26e14b417d38498fa82c1bffcebc344aa3fa03566cbc5de7c7b4067b89d95268a466c77c4e8354b334dfdbb59ad098a395f8476022e89c6eb2688bcd67223920beee4b6dfe30c171fd045155ca63eee080480e3e4fcbb8b2532836775540ec49b4", 0xc3, 0x3}]) 15:54:24 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x145, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1074.489077][ T8740] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:24 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ex%4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x134, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1074.711496][ T8740] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:24 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x146, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1074.950948][ T8737] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 15:54:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7a, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x135, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext\a\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1075.336588][ T8810] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:25 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:25 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x147, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:25 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xffffffdf) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext\n\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:25 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x136, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1075.631298][ T8810] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x300, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:25 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x148, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:25 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x137, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext%\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1076.207749][ T8884] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:26 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:26 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x149, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:26 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f0000000040)="79c873af7356db46e8e17f5fcfb8564e422ba409b27cb93c7194280060c98c6a", 0x20) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r0, &(0x7f00000001c0), 0xffffffffffffff85) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x410, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:26 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x138, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext-\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:26 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1076.826625][ T8932] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:26 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:26 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x139, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1077.070000][ T8932] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:27 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x500, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1077.411645][ T8981] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities 15:54:27 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000680)=""/223) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:27 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:27 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1077.569620][ T8993] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:27 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1077.623795][ T8981] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities 15:54:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='extm\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1077.758691][ C1] net_ratelimit: 26 callbacks suppressed [ 1077.758699][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1077.770159][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1077.775940][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1077.781770][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:54:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x600, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:27 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1077.997605][ T9027] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:27 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext\xff\xff', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:28 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x700, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:28 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:28 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1078.398679][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1078.404497][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1078.410342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1078.416163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1078.422528][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1078.428312][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1078.456034][ T9068] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:28 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x02', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1078.641557][ T9068] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:28 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x900, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:28 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:28 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x03', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:29 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000040)={0x10000000e609, 0x5, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000380)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:29 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x150, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1079.301908][ T9127] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:29 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1079.461863][ T9127] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:29 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x04', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xa00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:29 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x151, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:29 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x13f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1080.075786][ T9203] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:30 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x05', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:30 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x152, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1080.250176][ T9203] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:30 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:30 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:30 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x140, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:30 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x153, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1080.829335][ T9262] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x06', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf21, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:31 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x154, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:31 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x141, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\a', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:31 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1081.482459][ T9306] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:31 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f00000001c0)={0x0, 0xffff, 0x400, &(0x7f0000000040)=0x741}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1081.650530][ T9306] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) 15:54:31 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x142, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:31 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x155, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:31 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\b', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:31 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x143, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1082.121569][ T9363] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (2 blocks) [ 1082.273866][ T9363] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (2 blocks) 15:54:32 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x156, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1020, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\t', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:32 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x5087508, 0xaa1, 0x401, 0xeea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000780)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000009c0)=ANY=[]) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:32 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:32 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x144, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1082.670979][ T9420] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (2 blocks) 15:54:32 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x157, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1082.863065][ T9420] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (2 blocks) 15:54:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\n', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1f00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:33 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x145, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:33 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x158, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:33 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101200, 0x0) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\f', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1083.457206][ T9477] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (3 blocks) 15:54:33 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1083.710014][ T9477] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (3 blocks) 15:54:33 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x159, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:33 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x146, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x0f', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1083.998622][ C1] net_ratelimit: 26 callbacks suppressed [ 1083.998630][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.010121][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.015938][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.021730][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:54:34 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x147, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:34 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, 0x0, 0xfffffdd1, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x407d, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) dup2(r3, r1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r2, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1084.151049][ T9527] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (4 blocks) 15:54:34 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x10', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1084.300893][ T9527] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (4 blocks) 15:54:34 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2010, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:34 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x148, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1084.638633][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.644436][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.650289][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.656031][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.656101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.667566][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:54:34 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4#', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:34 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1084.824320][ T9580] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (4 blocks) [ 1084.968130][ T9580] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (4 blocks) 15:54:34 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x149, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:34 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, 0x0, 0x0, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x20048081, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='vxcan1\x00\x00\x00\xf8\xff\xff\xff\x00', 0x29) sendto(r3, &(0x7f0000000080)='\x00', 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x1) r5 = epoll_create1(0x80003) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000680)) r6 = openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r2, &(0x7f0000000440)={0x1d, r7}, 0xffffffffffffff80) 15:54:34 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x210f, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4-', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:35 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:35 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1085.466082][ T9650] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (4 blocks) 15:54:35 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4H', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:35 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000001c0)=0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r0, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) timerfd_gettime(r3, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1085.676554][ T9650] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (4 blocks) 15:54:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2300, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:35 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:35 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4L', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:35 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1086.211113][ T9713] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (4 blocks) 15:54:36 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:36 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1086.454559][ T9713] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (4 blocks) 15:54:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4`', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2d00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:36 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:36 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x160, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:36 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:36 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1087.214396][ T9789] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (5 blocks) 15:54:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4h', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1087.491815][ T9789] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (5 blocks) 15:54:37 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x161, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:37 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:37 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x400081, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440), 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:37 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3f00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4l', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:37 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x162, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:38 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x14f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1088.106748][ T9857] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (7 blocks) 15:54:38 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4t', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:38 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x163, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:38 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x150, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1088.698928][ T9904] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (8 blocks) 15:54:38 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="0e0000000100000008ffe200839a05e26ddd9ef94bd52a39f6b3ff2c4822680a9e032ec1915c6afc69e75552ef4e70c3490b81b84f76ec8ffecf71b8e9f87075baa35be3229b64bcce6432a1fad7e9baf7be64d2798a0b6c0bcbc596c0939c5edbb497e9a9db79f92b164ab2b8df211111393f09d6bf4a7b620621aab1ef8dfeca8c0a64291a1cb1bd2e01d2860315c1cc1994ccfbdebdb847954d0705c7e0ca6268d6eb14aff231c42219ed7760b0ac290b69eba838ebad0ccf4fee9fa8527edc7dae33f74b82fba91b50737c667ad420de55eabea0d5b42e90a11e7fe69a919f0ff951646f0bff0e9d9223d265"], 0xee) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000780)={0xf, @vbi={0x5, 0x0, 0x100000001, 0x42323151, [0x3f, 0x7], [0x939a, 0x2], 0x1}}) 15:54:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4z', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1088.838330][ T9904] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (8 blocks) 15:54:38 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:38 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x164, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:38 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x151, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4800, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:39 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x165, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1089.242407][ T9950] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (9 blocks) 15:54:39 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x152, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1089.490994][ T9950] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (9 blocks) [ 1089.501191][ T9973] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1089.557310][ T9973] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:54:39 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:39 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1089.657988][ T9973] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:54:39 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, 0x0, 0x0, 0x841) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f00000001c0)='./file1\x00', 0x8001, 0x4, &(0x7f0000000940)=[{&(0x7f0000000680)="19de0379c652066d8e1fcf23bac4214ca6f9e3fe7c6eed7d536a2746ba27f6b9d637a061ac6414a323a34f06a7e019af4e417be32e200d64bac7d0e60d8990daff8a10be48c4a77b86848da2f8a4f3b4a680a1ca1c457e1d60b23a3d72fdc2616cb40f258a6ae9c1e28df202710a81efa03b4b1e5476776d4bda2354acc0fca72faed2fb08d236f1b5ee769328191757ca2bf6442fb6c8828e38bbdae8210cb11126ea16625f15ea1dd3470608f7fcdcbbe41252747abbfbc20c24088a1475ae082d491cd2b0306f9509ba7ed24a8349", 0xd0, 0x1}, {&(0x7f0000000380)="e4ad4159760f1864608960e9cb26b07cb482efc94d470bdf2104f28eff", 0x1d, 0x800}, {&(0x7f0000000780)="173127d9a77f668d6e501d1b3d6fc5238bc4b91b9440099b7104f6fa8ce95c2e1eee3c6857b712004ff5f092153641db8623d4778f7f36aeb46adb83ee06b7dd93f5c8a17f059dfc1c986e1566f0dc50f931c8c6ad96df0e37634fce05610a502b9b3f37a22abc1b90c2e49734d318935dbc623720e3a0c6a8eacf5b732c02fbc36ef1faa04ae8b17848", 0x8a, 0x1}, {&(0x7f0000000840)="c3c55ea65a8f744526b189b0061b8a212ce1f2396b871600439c8b87c8cc0c2ae7cacf4be6eb598d30a9cded3e5a113f8061af18cd86e5c8e554409890ff93c28ed1866ccfced2b67e52a9d1062c87f5022330432bd8e59c6da07510e39a18f7059674a906665d77c96d8eaf59c6fe4e9c8a3da366dc72a474a2382b8420e3dcb561070e24dea6ae93978e8e8e00f9f7bc3b7aadc9033d87aecf95cd3f1e9ef3429257cf4cc694dde82bc221f86fa6717fa857ac950315cd3e34cecfe1343f28f3a21df1c2c1363b16c4cba14b72ca4ac94aa6c9275d3215a4f26f", 0xdb, 0x90e}], 0x1, &(0x7f0000000480)='$\x00') kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r2, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(r1, 0x0, 0xfffffffffffffd8a) r7 = creat(&(0x7f0000000040)='./file1\x00', 0x20) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:39 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x153, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1089.740028][ T9973] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1089.879318][ T9973] EXT4-fs (loop4): get root inode failed [ 1089.885229][ T9973] EXT4-fs (loop4): mount failed [ 1089.957903][T10012] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (9 blocks) 15:54:39 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x167, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1090.023601][T10025] ceph: device name is missing path (no : separator in /dev/loop3) 15:54:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x10', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:40 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x154, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:40 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r0, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1090.238643][ C1] net_ratelimit: 26 callbacks suppressed [ 1090.238650][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.250148][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.255923][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.261748][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.411514][T10048] ceph: device name is missing path (no : separator in /dev/loop3) [ 1090.444515][T10056] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (12 blocks) 15:54:40 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x168, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1090.681112][T10056] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (12 blocks) 15:54:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:40 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x4e22, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:40 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x155, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6800, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1090.878654][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.884449][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.890302][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.896072][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.901949][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.907739][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:54:40 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r0, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1091.100347][T10104] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:41 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x169, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1091.178027][T10104] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1091.242525][T10116] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (13 blocks) [ 1091.292386][T10104] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:54:41 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x156, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1091.379153][T10104] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1091.416937][T10116] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (13 blocks) 15:54:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6c00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1091.567519][T10104] EXT4-fs (loop4): get root inode failed [ 1091.607502][T10104] EXT4-fs (loop4): mount failed 15:54:41 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:41 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r0, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:41 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10000000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1091.802740][T10155] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (13 blocks) 15:54:41 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x157, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1091.910607][T10155] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (13 blocks) 15:54:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7400, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1092.144830][T10181] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1092.163643][T10183] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (14 blocks) [ 1092.195749][T10181] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:54:42 executing program 2: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1092.281793][T10181] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:54:42 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x158, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1092.343900][T10183] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (14 blocks) [ 1092.356303][T10181] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:54:42 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1092.420781][T10181] EXT4-fs (loop4): get root inode failed [ 1092.472656][T10181] EXT4-fs (loop4): mount failed 15:54:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7a00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1092.581956][T10181] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:42 executing program 2: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1092.648891][T10181] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1092.721382][T10235] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (15 blocks) 15:54:42 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0xc21c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000680)='a\xbe\xfb+Wnrd\x06\x00ma.\x80urren-\x9f6\xaf]3\x0e5Y\x8a\xbe\x8fQ+\xf7\x8f\xd7\x1e)\xa0H\f`K}@\xd9B:\x10o~Zk[\x10\xefDO6\x02T\xcc\xf3@\x9bsw\x11\x91k\x1b\x8bo@{\x85\x92\x84\x9b\xe6\xaba\x1d\xb5\x7fe\\\x9c\xd0kLqO\xcdJ\x9dWP0\x86X2\x01:go\xfd\x8f\x04\xe4\xdf\xe7\x00\x00\xce7\f\x9f\x7fX\xfaV:\xbe\xaf\xe0\x99\xf0,\xa1\xf6!\xf8\xa0*\xb8\x00\x00\x00\x00\x00\x00\x00\x19\x0e1Dn\xb6\xcf\xfbzcWg\xd7\xde\x14<8\x13\x81\x95\xa2-\xf2i\x95\xa5\xde\xac\xf5\xe7|q\xe6Nt\xda\xb7\xb2\x97\"\xa4*[\xbc;\xadm=\xaa\f4\xdc\xd0-p\xddX\x98\x861\xc4ta~8\x19A\x11\xaa\x86c\xc1\xecs\xd4\x84*\xc1\xe7\xe3\xe8\x9aF;/\xd8\xd3\x9e{\v\x83V\xc9d\xda\xe8\xdc\x1d', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:42 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x159, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1092.763089][T10181] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:54:42 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1092.895235][T10235] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (15 blocks) [ 1092.955667][T10181] EXT4-fs: failed to create workqueue [ 1092.977323][T10181] EXT4-fs (loop4): mount failed 15:54:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xedc0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:43 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:43 executing program 2: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:43 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1093.273884][T10276] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1093.311958][T10276] EXT4-fs (loop5): group descriptors corrupted! [ 1093.461157][T10294] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1093.509265][T10294] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:54:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xff0f, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1093.558895][T10294] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1093.658047][T10294] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:54:43 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:43 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1093.756871][T10294] EXT4-fs (loop4): get root inode failed [ 1093.782033][T10328] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:43 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) ioctl(r0, 0x10001, &(0x7f0000000680)="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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:43 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1093.957842][T10294] EXT4-fs (loop4): mount failed [ 1093.963896][T10328] EXT4-fs (loop5): group descriptors corrupted! 15:54:43 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:44 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1094.207941][T10357] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1094.288833][T10357] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1094.332536][T10357] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1094.468032][T10357] EXT4-fs: failed to create workqueue [ 1094.525751][T10383] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1094.547527][T10357] EXT4-fs (loop4): mount failed [ 1094.686762][T10383] EXT4-fs (loop5): group descriptors corrupted! 15:54:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:44 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x170, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:44 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:44 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000040)=0x2, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:44 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:44 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x171, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:45 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x15f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1095.372702][T10444] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1095.426637][T10444] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:54:45 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x172, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1095.499000][T10451] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1095.518937][T10444] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:54:45 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1095.638931][T10444] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1095.688669][T10451] EXT4-fs (loop5): group descriptors corrupted! [ 1095.720388][T10444] EXT4-fs (loop4): get root inode failed [ 1095.745648][T10444] EXT4-fs (loop4): mount failed 15:54:45 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x160, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1095.841713][T10451] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1095.954254][T10451] EXT4-fs (loop5): group descriptors corrupted! [ 1095.971015][T10444] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1096.115601][T10444] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1096.248616][T10444] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1096.347318][T10444] EXT4-fs: failed to create workqueue [ 1096.399569][T10444] EXT4-fs (loop4): mount failed 15:54:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:46 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x173, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:46 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, 0x0, 0x0, 0x120, &(0x7f0000000040)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:46 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x161, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1096.478628][ C1] net_ratelimit: 26 callbacks suppressed [ 1096.478636][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1096.490105][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1096.495894][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1096.501691][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1096.636496][T10529] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1096.719078][T10541] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1096.732719][T10529] EXT4-fs (loop5): group descriptors corrupted! 15:54:46 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x162, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1096.837196][T10541] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1096.872312][T10529] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:46 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x174, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1096.965421][T10541] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1096.976521][T10529] EXT4-fs (loop5): group descriptors corrupted! [ 1097.073512][T10541] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1097.118626][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1097.124471][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1097.130315][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1097.136057][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1097.141913][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1097.147697][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:54:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc0000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1097.179482][T10541] EXT4-fs (loop4): get root inode failed 15:54:47 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000001c0)={0x4, &(0x7f0000000040)=[0x0, 0x0, 0x4, 0x1]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_create1(0x80000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={0x0, 0x34c}, &(0x7f00000018c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000001900)=ANY=[@ANYRES32=0x0, @ANYBLOB="f1000000533a71deafd4475a868f22bf9933365f76a0bc1071ce8735add661eb8df5dca89d1217a066f3d03f8b67d8382c61b1f29c60cb77ac90f3d40af62bbe8ac861c77d85a97178caaa8d77132d89a74cbc7ad038e270f8f67939040df6a7cc015e35dd856be73acdb5e2986629033c88c627683d34d7bac32af8a4a897bf15a88f8a76525d825dbd4418b46a2561e70ab02d1e8d62b8708e0e6eefed2e4cd9b34f84bf2c6192698617901da51c7e7560aa84ac4f13f93de06269d255ca176cc8f032a1354312ee931d7911f3f9b2f66e0ca6bf22f0b5f990ad3a512aecdd80dd64517696ac6d937d6d9eb2fbcc14982ba2f24f"], &(0x7f0000001a00)=0xf9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001a40)={0x7, 0x5, 0x4, 0x0, 0x2, 0x2, 0x6a, 0x9, 0x0}, &(0x7f0000001a80)=0x20) sendmsg$inet_sctp(r1, &(0x7f0000001b80)={&(0x7f0000000380)=@in6={0xa, 0x4e22, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="d6cc55b4be3d6449b84d4fc0caa9ca1861a04ed8930710974effd37d588894483ab0242b9e5a5f6a6c5edbe150fb7039ca387799ff44e0455ba0bfd393457b4f0eb3c78f439b0af6fe4c40790b387a5e5d2edb8059bba82b865c5ba4c83b7bce6d9b98fa8f58ef3e503558da274c4ba62e117186eea547e8eb9679e2cb1a0059de1af77a480cd4abfe1f172d7c99f92632c22656d8f8020264dd4e95144b78ab55c4d998196611f407f60a0a85089f65f3d78bb31b07feb530bcf87efb0c541bad85af20c0bf55536ee8b5", 0xcb}, {&(0x7f0000001780)="fc24aa445035bcd8873633098863e63e3d7e2cf802323ca5ef7d6a56c57645b1d28beac86bba25d857d11f9057a25073be1d54341a3367a1b8232e4c5f2996c33cb1b77f6bb661780b266278e6a57565549150c3a26141cc7e47f60647fcd9389ef90412aaa95dcb288cc146ee83dae138548694ccf7e66e5aee", 0x7a}, {&(0x7f0000001800)="aeb031a259a2241ae161324fa96f1a469850056f3abd855275758643e4d29abfe48b3ded82fbf861f148f7a447c325b76102cd738b33d49aaadcc84aaf2f335e0ebe22d0fb0db816eb842bc14cf3bd673d255eb242f207dcf22e3664309a37df61974933ca5bd6af337799e8f708d6ca501525499a1e6de564ae42d3f44e7ffb63854f935dd22f446a3f828a88348efe363fbc3e36d022610b0af443efb2c921920cbf9276f41cc9315534fc457dbc", 0xaf}], 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="20000000000000008400000008000000fe800000000000000000000000000011300000000000000084000000010000007da10700020000003f19ff6700000000124b00000000000001010000", @ANYRES32=r4, @ANYBLOB="30000000000000008400000001000000070000000c82000005000000e20000001f0000000300000005000000", @ANYRES32=r5, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\aG\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="180000000000000084000000050000003000000008000000"], 0xb8, 0x810}, 0x4) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r7}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r8 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1097.246314][T10541] EXT4-fs (loop4): mount failed 15:54:47 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x163, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1097.398647][T10541] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1097.436505][T10601] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1097.480351][T10541] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1097.518104][T10601] EXT4-fs (loop5): group descriptors corrupted! [ 1097.574147][T10541] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1097.663513][T10601] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1097.671336][T10541] EXT4-fs: failed to create workqueue [ 1097.749475][T10601] EXT4-fs (loop5): group descriptors corrupted! [ 1097.758634][T10541] EXT4-fs (loop4): mount failed 15:54:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:47 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x175, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:47 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x164, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1098.179069][T10655] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:48 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x165, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:48 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x176, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:48 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x0) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000500)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000020a43ba5d8060000000ecffffff0029ec2400020cd37ed01cc0730ec279b287bf4042d1", 0x4c}], 0x1, 0x0, 0xffffffffffffff3b}, 0x0) iopl(0x8000000000000000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x4, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r2, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(r5, 0x0, 0xfffffffffffffdc5) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) [ 1098.264314][T10670] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1098.288758][T10655] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1098.356961][T10655] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1098.394975][T10670] EXT4-fs (loop5): group descriptors corrupted! [ 1098.468901][T10655] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1098.540552][T10670] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1098.550732][T10655] EXT4-fs (loop4): get root inode failed [ 1098.602025][T10670] EXT4-fs (loop5): group descriptors corrupted! 15:54:48 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x177, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1098.700437][T10655] EXT4-fs (loop4): mount failed 15:54:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:48 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x0) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1098.968356][T10709] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1099.018734][T10709] EXT4-fs (loop5): group descriptors corrupted! 15:54:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:48 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:48 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x2, 0x4) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0xfffffffffffffffa) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20004, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000004c0)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1099.141821][T10709] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1099.209624][T10709] EXT4-fs (loop5): group descriptors corrupted! 15:54:49 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x178, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1099.291004][T10738] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:49 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x167, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1099.338827][T10738] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1099.374378][T10738] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:54:49 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x0) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1099.437185][T10738] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1099.532539][T10760] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1099.543045][T10738] EXT4-fs (loop4): get root inode failed [ 1099.575207][T10738] EXT4-fs (loop4): mount failed 15:54:49 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x179, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1099.618449][T10760] EXT4-fs (loop5): group descriptors corrupted! 15:54:49 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x168, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1099.711373][T10738] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1099.760879][T10760] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:49 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000380)={@multicast1, @broadcast, 0x0}, &(0x7f0000000480)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', r5}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1099.857287][T10760] EXT4-fs (loop5): group descriptors corrupted! [ 1099.871655][T10738] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:54:49 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1099.925386][T10738] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:54:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1099.991833][T10738] EXT4-fs: failed to create workqueue [ 1100.055884][T10738] EXT4-fs (loop4): mount failed 15:54:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x04', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:50 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:50 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x169, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1100.268056][T10810] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:50 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1100.354918][T10810] EXT4-fs (loop5): group descriptors corrupted! 15:54:50 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:50 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4 ', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:50 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) r7 = fcntl$getown(r1, 0x9) ptrace$getsig(0x4202, r7, 0x5, &(0x7f0000000680)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:50 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1100.849782][T10869] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:50 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1100.946139][T10869] EXT4-fs (loop5): group descriptors corrupted! [ 1101.073358][T10869] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1101.152993][T10869] EXT4-fs (loop5): group descriptors corrupted! [ 1101.188510][T10903] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:51 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1101.295236][T10903] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:54:51 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:51 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:51 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r2, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(r5, 0x0, 0xfffffffffffffe74) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x113, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r8}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r7, 0x4010ae94, &(0x7f0000000040)={0x6, 0x6, 0x5}) [ 1101.434305][T10903] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1101.462741][T10925] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1101.518807][T10925] EXT4-fs (loop5): group descriptors corrupted! [ 1101.573128][T10903] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1101.694939][T10903] EXT4-fs (loop4): get root inode failed 15:54:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:51 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1101.757266][T10903] EXT4-fs (loop4): mount failed 15:54:51 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x10', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1102.123938][T10974] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1102.249334][T10974] EXT4-fs (loop5): group descriptors corrupted! 15:54:52 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:52 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:52 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1102.449716][T10974] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1102.611743][T10974] EXT4-fs (loop5): group descriptors corrupted! 15:54:52 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x16f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1102.718633][ C1] net_ratelimit: 26 callbacks suppressed [ 1102.718640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.730160][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1102.735989][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.741819][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:54:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:52 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x180, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1103.009704][T11024] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:52 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000040)={0x5, 0x7f}) 15:54:52 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1103.169564][T11024] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1103.180014][T11044] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:53 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x170, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1103.296531][T11024] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1103.318646][T11044] EXT4-fs (loop5): group descriptors corrupted! [ 1103.358651][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.364416][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1103.370231][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.375976][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1103.381846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.387315][T11024] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1103.387627][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:54:53 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x181, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1103.464738][T11044] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1103.548774][T11044] EXT4-fs (loop5): group descriptors corrupted! [ 1103.560523][T11024] EXT4-fs (loop4): get root inode failed [ 1103.583700][T11024] EXT4-fs (loop4): mount failed 15:54:53 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x171, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:53 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x182, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1104.025195][T11094] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:53 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x172, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1104.158697][T11107] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1104.158704][T11094] EXT4-fs (loop5): group descriptors corrupted! [ 1104.251351][T11094] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1104.278443][T11107] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:54:54 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x183, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:54 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1104.336864][T11094] EXT4-fs (loop5): group descriptors corrupted! [ 1104.378349][T11107] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1104.439035][T11107] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:54:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:54 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0x0, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:54 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x173, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1104.520984][T11107] EXT4-fs (loop4): get root inode failed [ 1104.538685][T11107] EXT4-fs (loop4): mount failed [ 1104.663915][T11107] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1104.718160][T11147] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1104.773747][T11147] EXT4-fs (loop5): group descriptors corrupted! [ 1104.786710][T11107] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:54:54 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x184, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1104.902371][T11107] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1104.913545][T11147] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:54 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x174, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1104.989053][T11107] EXT4-fs: failed to create workqueue [ 1104.994438][T11107] EXT4-fs (loop4): mount failed [ 1105.045133][T11147] EXT4-fs (loop5): group descriptors corrupted! 15:54:55 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000001c0)=0x4) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:55 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0x0, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1105.326158][T11197] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:55 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x175, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:55 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x185, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1105.469969][T11197] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1105.488306][T11209] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1105.589041][T11209] EXT4-fs (loop5): group descriptors corrupted! [ 1105.596916][T11197] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:54:55 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x176, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1105.691095][T11197] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1105.721691][T11209] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1105.773509][T11209] EXT4-fs (loop5): group descriptors corrupted! [ 1105.783006][T11197] EXT4-fs (loop4): get root inode failed 15:54:55 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x186, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1105.823572][T11197] EXT4-fs (loop4): mount failed 15:54:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:55 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x3ffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0xaa8ff6757d3059d4, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000001c0)=0xc) kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, r1, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(r1, 0x0, 0xfcd0) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) bind$isdn_base(r7, &(0x7f0000000040)={0x22, 0xe00000000000000, 0x30, 0x78f1, 0x4d58}, 0x6) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:55 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x177, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1106.191352][T11262] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:56 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0x0, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:56 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x187, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1106.339364][T11262] EXT4-fs (loop5): group descriptors corrupted! [ 1106.368639][T11278] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1106.537852][T11262] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1106.574019][T11278] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1106.612604][T11262] EXT4-fs (loop5): group descriptors corrupted! 15:54:56 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x178, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1106.719867][T11278] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:54:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10040000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:56 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x188, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1106.819940][T11278] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:54:56 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x0, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1106.900752][T11278] EXT4-fs (loop4): get root inode failed [ 1106.944809][T11278] EXT4-fs (loop4): mount failed 15:54:56 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x179, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1107.100619][T11328] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1107.122028][T11328] EXT4-fs (loop5): group descriptors corrupted! 15:54:57 executing program 3: socketpair$unix(0x1, 0xa, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80002) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1107.176119][T11278] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1107.260660][T11278] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:54:57 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x189, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1107.326295][T11328] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1107.372867][T11278] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1107.449759][T11328] EXT4-fs (loop5): group descriptors corrupted! [ 1107.480760][T11278] EXT4-fs: failed to create workqueue [ 1107.486137][T11278] EXT4-fs (loop4): mount failed 15:54:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:57 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x0, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:57 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1f000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:57 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:57 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f0000000680)={{0x1cf, 0x100000001, 0x80000000, 0x3b, 0x274, 0x3, 0xb6, 0x3}, "1cd739aaaadc8b64128aa1fb84b57f52e069df12f3dfd2606a78", [[], [], [], []]}, 0x43a) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1108.079428][T11395] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1108.171013][T11395] EXT4-fs (loop5): group descriptors corrupted! [ 1108.194559][T11406] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:58 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:58 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:58 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x0, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1108.306334][T11395] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1108.331199][T11406] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1108.419100][T11395] EXT4-fs (loop5): group descriptors corrupted! [ 1108.456061][T11406] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1108.517385][T11406] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:54:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:58 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1108.684488][T11406] EXT4-fs (loop4): get root inode failed [ 1108.724693][T11406] EXT4-fs (loop4): mount failed 15:54:58 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1108.792051][T11445] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1108.884327][T11445] EXT4-fs (loop5): group descriptors corrupted! [ 1108.895300][T11406] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1108.958678][ C1] net_ratelimit: 26 callbacks suppressed [ 1108.958685][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1108.970188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1108.976009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1108.979637][T11406] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1108.981817][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1109.077605][T11445] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1109.144850][T11445] EXT4-fs (loop5): group descriptors corrupted! [ 1109.164935][T11406] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1109.267333][T11406] EXT4-fs: failed to create workqueue [ 1109.290933][T11406] EXT4-fs (loop4): mount failed 15:54:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:54:59 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x3, 0x96}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:59 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:59 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:54:59 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20100000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:54:59 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1109.593935][T11496] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1109.603855][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1109.603902][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1109.603995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1109.604033][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1109.604108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1109.604149][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1109.708043][T11509] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:54:59 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:54:59 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1109.788742][T11509] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1109.799260][T11496] EXT4-fs (loop5): group descriptors corrupted! [ 1109.861873][T11509] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1110.005389][T11509] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:54:59 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x17f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1110.081692][T11496] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1110.133903][T11509] EXT4-fs (loop4): get root inode failed [ 1110.158823][T11509] EXT4-fs (loop4): mount failed [ 1110.163798][T11496] EXT4-fs (loop5): group descriptors corrupted! 15:55:00 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x210f0000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1110.371694][T11509] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1110.460669][T11509] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1110.524707][T11573] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1110.541149][T11509] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1110.616104][T11509] EXT4-fs: failed to create workqueue [ 1110.648979][T11573] EXT4-fs (loop5): group descriptors corrupted! [ 1110.652908][T11509] EXT4-fs (loop4): mount failed 15:55:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:00 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0xfffffffffffff9ef, 0xfffffffffff7f026, 0x4, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x7ffffffffffffffd) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r1, 0x0, 0xa, &(0x7f00000001c0)='/dev/ptmx\x00', 0xffffffffffffffff}, 0x30) kcmp$KCMP_EPOLL_TFD(r6, r5, 0x7, r0, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r7}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'teql0\x00', {0x2, 0x4e21, @broadcast}}) gettid() syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r8 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000380)=0xfffffffffffffea7) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:00 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x180, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:00 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:00 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x190, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x23000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1110.915683][T11592] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1110.989880][T11592] EXT4-fs (loop5): group descriptors corrupted! 15:55:00 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x191, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:00 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x181, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1111.068513][T11605] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2d000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1111.117885][T11605] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1111.139524][T11605] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1111.270450][T11605] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:01 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1111.369568][T11605] EXT4-fs (loop4): get root inode failed [ 1111.387902][T11629] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1111.398846][T11605] EXT4-fs (loop4): mount failed 15:55:01 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x192, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1111.468841][T11629] EXT4-fs (loop5): group descriptors corrupted! 15:55:01 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x40000001f5) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1111.597496][T11605] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1111.619844][T11629] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1111.694413][T11629] EXT4-fs (loop5): group descriptors corrupted! [ 1111.696527][T11605] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1111.811630][T11605] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1111.907572][T11605] EXT4-fs: failed to create workqueue [ 1111.941299][T11605] EXT4-fs (loop4): mount failed 15:55:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:01 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x182, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3f000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:01 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:01 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x193, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1112.209131][T11689] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:02 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000040)={0x10000000e609, 0xfffffffffffff026, 0x4001001ffffe, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3e) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1112.357451][T11704] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1112.393416][T11689] EXT4-fs (loop5): group descriptors corrupted! 15:55:02 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x183, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1112.411804][T11704] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1112.448529][T11704] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:02 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x194, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:02 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1112.545460][T11689] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1112.560384][T11704] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1112.644266][T11689] EXT4-fs (loop5): group descriptors corrupted! [ 1112.667718][T11704] EXT4-fs (loop4): get root inode failed [ 1112.718882][T11704] EXT4-fs (loop4): mount failed 15:55:02 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x184, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:02 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x195, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1113.176082][T11768] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1113.233583][T11778] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1113.268635][T11778] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1113.291142][T11768] EXT4-fs (loop5): group descriptors corrupted! 15:55:03 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x185, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1113.460730][T11768] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1113.475364][T11778] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1113.508739][T11768] EXT4-fs (loop5): group descriptors corrupted! 15:55:03 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:03 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:03 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x196, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1113.592381][T11778] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1113.666225][T11778] EXT4-fs (loop4): get root inode failed [ 1113.717947][T11778] EXT4-fs (loop4): mount failed 15:55:03 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x186, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x48000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1113.884754][T11778] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1113.968697][T11778] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:03 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x197, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1114.093254][T11778] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1114.168370][T11832] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:04 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:04 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x187, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1114.278052][T11778] EXT4-fs: failed to create workqueue [ 1114.325538][T11832] EXT4-fs (loop5): group descriptors corrupted! [ 1114.382667][T11778] EXT4-fs (loop4): mount failed [ 1114.464454][T11832] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1114.549652][T11832] EXT4-fs (loop5): group descriptors corrupted! 15:55:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:04 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000680)={0x1d, r5}, 0xffffffffffffffa8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:04 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x198, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:04 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x188, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4c000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:04 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1114.890503][T11882] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1114.965312][T11882] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1115.019136][T11891] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1115.059653][T11882] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:04 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x199, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1115.109216][T11891] EXT4-fs (loop5): group descriptors corrupted! 15:55:05 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x189, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1115.190215][T11882] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1115.202418][ C1] net_ratelimit: 26 callbacks suppressed [ 1115.202426][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.202476][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1115.202557][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.202601][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:55:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x60000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1115.284001][T11882] EXT4-fs (loop4): get root inode failed [ 1115.320385][T11882] EXT4-fs (loop4): mount failed [ 1115.494415][T11882] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:05 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:05 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x3) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000001c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) kcmp$KCMP_EPOLL_TFD(r6, r5, 0x7, r1, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r7}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r8 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r8, 0x8250aea6, &(0x7f0000000680)=""/67) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000380)=0xffffffffffffff6e) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:05 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1115.632531][T11882] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1115.668397][T11938] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1115.708658][T11882] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1115.759393][T11882] EXT4-fs: failed to create workqueue [ 1115.802198][T11882] EXT4-fs (loop4): mount failed [ 1115.838650][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.844447][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1115.850280][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.856043][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1115.861890][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.867751][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1115.878794][T11938] EXT4-fs (loop5): group descriptors corrupted! 15:55:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:05 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:05 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x68000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:06 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:06 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1116.388156][T11993] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1116.398685][T11998] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:06 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1116.467096][T11993] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1116.493773][T11998] EXT4-fs (loop5): group descriptors corrupted! [ 1116.546187][T11993] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1116.610243][T11998] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:06 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r5}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(r1, 0x0, 0xfffffffffffffe81) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000700), &(0x7f0000000180)=0x68) r7 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000680)="2df441b2453481c3fa40fe34d07bef1bcbb84c675a36264e6c78447417ae27721fb132d33a2a5577401af06ec424a5830162f74725ca295e37fcc1eb66ce3698c6fa1d2ea3f10ddaa20cbe220a55645a7f7e76ff1cba67790272881fb70c", 0x5e, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000380)={r7, 0x9, 0x2}, &(0x7f0000000b00)=ANY=[@ANYBLOB="656e633d6f6165702068610100000068613232342d61726d36342d6e656f6e0000000080000000000000010000000000000000000000000000000000000000000000000000000000119f6f0cd5903b5c169734b1b9b03ce25049ec9cc55be82c6e9b9fa200c36887d892a88aa48c51d8b0d259124f7000500c46c4c674cea3bca67bca3fec5d07061ea1becbf63c76dd91a906b2e6965245c2d15811e03dcb3700000000000000938c4cf08d3dc7d3e0ae76e0dd77a01dad3295dfa136e74124b79ce17d4a3a8ab081"], &(0x7f0000000780)="1d15bd54f4ca4642560ec2775045c93c0544eff4d7169b6c59dc3e3617c035daea79160b9ee478dc8a7c029236f4217e1c75f50c39a8e2e584b413d39cdb4f58bb2313d735bea28fa208b4154171fa11a9f9df3de6f09e9d027c3621130b7f97be3d26f491a25dda1d67b71b53c158a876051343c4c492a68cf0579e6ef5b98c9c9965cd872d12e44106a3b61b7e55a53aa0be61e95c21a31743b11db0b2051d1c9d546260df4e58f6dc810b21157bdecc0fad9fa3", &(0x7f0000000840)=""/225) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1116.667770][T11993] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1116.748421][T11998] EXT4-fs (loop5): group descriptors corrupted! [ 1116.803019][T11993] EXT4-fs (loop4): get root inode failed 15:55:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:06 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1116.873278][T11993] EXT4-fs (loop4): mount failed 15:55:06 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:06 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xe0', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:07 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1117.329764][T12058] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1117.409881][T12058] EXT4-fs (loop5): group descriptors corrupted! 15:55:07 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x74000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:07 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:07 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0xce) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xffffffffffffffff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x100000000200783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2000000, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r2, &(0x7f0000000440)={0x1d, r8}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x100, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x1, 0x6}) creat(&(0x7f00000001c0)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:07 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1118.025883][T12111] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1118.122474][T12111] EXT4-fs (loop5): group descriptors corrupted! 15:55:08 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x18f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1118.284898][T12126] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1118.334815][T12111] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1118.367780][T12126] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:08 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:08 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1118.443696][T12111] EXT4-fs (loop5): group descriptors corrupted! [ 1118.509995][T12126] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7a000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1118.614309][T12126] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:08 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x190, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1118.679267][T12126] EXT4-fs (loop4): get root inode failed [ 1118.707401][T12126] EXT4-fs (loop4): mount failed 15:55:08 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000680)={'nat\x00'}, &(0x7f0000000000)=0x78) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1118.902984][T12126] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1119.009674][T12178] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1119.027101][T12126] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1119.123255][T12178] EXT4-fs (loop5): group descriptors corrupted! [ 1119.132806][T12126] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:09 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:09 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1119.220975][T12126] EXT4-fs: failed to create workqueue [ 1119.278757][T12126] EXT4-fs (loop4): mount failed 15:55:09 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x191, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x80', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:09 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:09 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1119.761557][T12227] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:09 executing program 3: socketpair$unix(0x1, 0x2000000000000005, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000680)=""/170, &(0x7f0000000040)=0x80) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xc0', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1119.862415][T12227] EXT4-fs (loop5): group descriptors corrupted! 15:55:09 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x192, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1120.036077][T12227] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1120.150412][T12227] EXT4-fs (loop5): group descriptors corrupted! 15:55:10 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x97ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x0f', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:10 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:10 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x193, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1120.589296][T12277] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:10 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1120.664408][T12277] EXT4-fs (loop5): group descriptors corrupted! 15:55:10 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x194, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1120.845429][T12277] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:10 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000680)={0xe, 0x5, 0xffffffffffffff68, 0x3f, 0x92, "6baed74f7aef64421de84f1fa1778caddb51f70c67b1b9e5967f3725b641e9da3203d481edb742949f8fe83767e259da020355894471de9992120eacced4ffcb27431b93297ce453d5a51350cb1c013b7dce0e88d4f51264a242746b0c960930a4b5eefe81986ab084117963f215b3ca7df0651a0f79e9d224a2d27cc6bb2938881d22bac44ca25cdae595eb0f0c0aa5c9c6"}, 0x9e) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1120.921967][T12277] EXT4-fs (loop5): group descriptors corrupted! 15:55:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc0ed0000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:11 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:11 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1121.135162][T12330] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:11 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x195, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1121.228041][T12330] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1121.296962][T12336] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1121.380305][T12330] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1121.433235][T12336] EXT4-fs (loop5): group descriptors corrupted! [ 1121.439704][ C1] net_ratelimit: 26 callbacks suppressed [ 1121.439712][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.439781][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.439913][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.439960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.489948][T12330] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1121.560841][T12330] EXT4-fs (loop4): get root inode failed 15:55:11 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x196, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1121.603267][T12330] EXT4-fs (loop4): mount failed 15:55:11 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1121.786112][T12330] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1121.912290][T12330] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1121.999468][T12330] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:11 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x197, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1122.069358][T12330] EXT4-fs: failed to create workqueue [ 1122.075113][T12330] EXT4-fs (loop4): mount failed [ 1122.081469][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1122.082009][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1122.083289][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1122.083739][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1122.084289][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:55:12 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1122.084788][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1122.183283][T12406] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1122.270711][T12406] EXT4-fs (loop5): group descriptors corrupted! [ 1122.436300][T12420] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1122.518174][T12420] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1122.599673][T12420] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:12 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x198, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf5ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:12 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:12 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) fcntl$dupfd(r2, 0x406, r3) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:12 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1122.711627][T12420] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1122.772424][T12436] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1122.811427][T12420] EXT4-fs (loop4): get root inode failed [ 1122.868108][T12420] EXT4-fs (loop4): mount failed [ 1122.925452][T12436] EXT4-fs (loop5): group descriptors corrupted! 15:55:12 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:12 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x199, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1123.002977][T12420] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1123.120834][T12436] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1123.138643][T12420] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:13 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1123.268502][T12436] EXT4-fs (loop5): group descriptors corrupted! [ 1123.269123][T12420] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1123.360695][T12420] EXT4-fs: failed to create workqueue 15:55:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1123.408632][T12420] EXT4-fs (loop4): mount failed 15:55:13 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:13 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:13 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000680)={0x0, 0x62, "55237f1fe04b453d98b72def69f28dedb9ef67237da3bb8e4ae55cee10cb50ca88ef8790037ece4afa6de7c519aa4df0371e97eb40396358c18040d44a580695c692e43aa1ecddff11d813252fa37f884d5134c39d53af27cf165ff15aa47e654a0e"}, &(0x7f0000000040)=0x6a) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={r5, 0x1, 0x30}, &(0x7f0000000380)=0xc) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r0) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1123.629964][T12502] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1123.696538][T12502] EXT4-fs (loop5): group descriptors corrupted! 15:55:13 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf9fdffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1123.854248][T12515] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:13 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1aa, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1123.955679][T12515] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:13 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1124.022358][T12529] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1124.090133][T12515] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1124.111058][T12529] EXT4-fs (loop5): group descriptors corrupted! [ 1124.179924][T12515] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfbffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:14 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ab, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1124.278002][T12515] EXT4-fs (loop4): get root inode failed [ 1124.331229][T12515] EXT4-fs (loop4): mount failed 15:55:14 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:14 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1124.464675][T12558] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1124.485667][T12515] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1124.550771][T12558] EXT4-fs (loop5): group descriptors corrupted! [ 1124.594167][T12515] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1124.710023][T12515] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:14 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ac, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1124.802824][T12515] EXT4-fs: failed to create workqueue [ 1124.808225][T12515] EXT4-fs (loop4): mount failed 15:55:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:14 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) ptrace$setsig(0x4203, r2, 0x8, &(0x7f0000000680)={0x4, 0x1, 0x2}) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r5 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:14 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1125.104030][T12601] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1125.140950][T12601] EXT4-fs (loop5): group descriptors corrupted! 15:55:15 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:15 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ad, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1125.260499][T12611] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1125.388948][T12611] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:15 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1125.477573][T12611] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1125.565900][T12611] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:15 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ae, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1125.646657][T12611] EXT4-fs (loop4): get root inode failed [ 1125.695460][T12641] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1125.721490][T12611] EXT4-fs (loop4): mount failed [ 1125.805407][T12641] EXT4-fs (loop5): group descriptors corrupted! 15:55:15 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:15 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x38, r5, 0x102, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x89}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40810) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:15 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x19f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1125.854482][T12611] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1125.997506][T12641] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1126.007790][T12611] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1126.018927][T12641] EXT4-fs (loop5): group descriptors corrupted! 15:55:15 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1af, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1126.071403][T12611] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1126.176770][T12611] EXT4-fs: failed to create workqueue [ 1126.217974][T12611] EXT4-fs (loop4): mount failed 15:55:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xff', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfdffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:16 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:16 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:16 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1126.552183][T12706] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1126.592790][T12706] EXT4-fs (loop5): group descriptors corrupted! 15:55:16 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) getrandom(&(0x7f0000000680)=""/176, 0xb0, 0x1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:16 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1126.767996][T12706] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1126.907244][T12706] EXT4-fs (loop5): group descriptors corrupted! 15:55:16 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:16 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1127.015919][T12752] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:17 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1127.161438][T12752] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1127.194858][T12752] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:17 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1127.293766][T12752] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1127.421702][T12769] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1127.431496][T12752] EXT4-fs (loop4): get root inode failed [ 1127.431505][T12752] EXT4-fs (loop4): mount failed 15:55:17 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x6) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1127.480086][T12769] EXT4-fs (loop5): group descriptors corrupted! [ 1127.555627][T12752] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1127.593267][T12769] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:17 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1127.678629][ C1] net_ratelimit: 26 callbacks suppressed [ 1127.678638][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1127.690163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1127.695965][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1127.699305][T12752] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1127.701763][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1127.711868][T12769] EXT4-fs (loop5): group descriptors corrupted! 15:55:17 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:17 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1127.844305][T12752] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xff0f0000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1127.899264][T12752] EXT4-fs: failed to create workqueue [ 1127.948610][T12752] EXT4-fs (loop4): mount failed 15:55:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1128.152623][T12833] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1128.179011][T12833] EXT4-fs (loop5): group descriptors corrupted! 15:55:18 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:18 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:18 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1128.319758][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1128.326267][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1128.332804][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1128.339005][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1128.346458][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1128.353236][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:55:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdf9, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1128.446730][T12851] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:18 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x4, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000040)=0x80000000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1128.559256][T12851] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1128.609772][T12851] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1128.681409][T12871] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1128.726690][T12851] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:18 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1128.774360][T12871] EXT4-fs (loop5): group descriptors corrupted! 15:55:18 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1128.962637][T12871] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1128.978529][T12851] EXT4-fs (loop4): get root inode failed 15:55:18 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1129.028719][T12871] EXT4-fs (loop5): group descriptors corrupted! [ 1129.038649][T12851] EXT4-fs (loop4): mount failed 15:55:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfc, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:19 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:19 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xfc', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1129.390818][T12920] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:19 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1129.545162][T12920] EXT4-fs (loop5): group descriptors corrupted! 15:55:19 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1129.694619][T12920] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:19 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1129.765111][T12920] EXT4-fs (loop5): group descriptors corrupted! 15:55:19 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfd, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1130.125199][T12969] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1130.135386][T12970] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:20 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1130.190414][T12969] EXT4-fs (loop5): group descriptors corrupted! [ 1130.209532][T12970] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:20 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x1000002a0, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0xfefffffffffffbfd) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000001c0)={'rose0\x00', {0x2, 0x4e23, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) getsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000040), &(0x7f00000002c0)=0x4) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1130.252888][T12970] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:20 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:20 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1130.393796][T12970] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1130.495338][T12970] EXT4-fs (loop4): get root inode failed [ 1130.548851][T12970] EXT4-fs (loop4): mount failed 15:55:20 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1130.658749][T13015] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1130.684865][T13015] EXT4-fs (loop5): group descriptors corrupted! 15:55:20 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1a9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1130.736761][T12970] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1130.812507][T12970] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:20 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r4) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @ib={0x1b, 0x6d, 0x800, {"7f6884837091cc4460a6ec7eb5a3999b"}, 0x3ff, 0x6, 0x3f}}}, 0x90) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r8 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffff8c, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1130.920884][T12970] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1130.959871][T12970] EXT4-fs: failed to create workqueue 15:55:20 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1130.970554][T12970] EXT4-fs (loop4): mount failed 15:55:20 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ba, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1131.093982][T13045] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:21 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1aa, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1131.149275][T13045] EXT4-fs (loop5): group descriptors corrupted! 15:55:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffff97, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1131.387895][T13067] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:21 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ab, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:21 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1bb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1131.510936][T13067] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1131.543453][T13082] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1131.591555][T13067] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1131.619963][T13082] EXT4-fs (loop5): group descriptors corrupted! [ 1131.642669][T13067] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1131.727034][T13082] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:21 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:21 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0xfffffffffffffda8, 0xfc, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000001c0)=0xe9) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1131.802272][T13082] EXT4-fs (loop5): group descriptors corrupted! [ 1131.812366][T13067] EXT4-fs (loop4): get root inode failed [ 1131.847593][T13067] EXT4-fs (loop4): mount failed 15:55:21 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ac, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:21 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1bc, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff4, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1132.198457][T13141] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:22 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ad, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:22 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1bd, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1132.306902][T13141] EXT4-fs (loop5): group descriptors corrupted! [ 1132.334710][T13157] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1132.515785][T13157] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:22 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1132.646293][T13157] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:22 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ae, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff5, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:22 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1be, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1132.788032][T13157] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1133.012871][T13197] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1133.034194][T13157] EXT4-fs (loop4): get root inode failed 15:55:23 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1af, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1133.120068][T13157] EXT4-fs (loop4): mount failed [ 1133.128665][T13197] EXT4-fs (loop5): group descriptors corrupted! 15:55:23 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x1) r4 = epoll_create1(0x7ffff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0xffffffffffffffd8) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r5, &(0x7f0000000440)={0x1d, r6}, 0x7) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x15, 0x35, 0x2, 0xa, 0xb, 0x0, 0x0, 0x3c, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:23 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:23 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1bf, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:23 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:23 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1133.727305][T13255] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1133.739526][T13255] EXT4-fs (loop5): group descriptors corrupted! [ 1133.779168][T13247] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:23 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1133.905046][T13247] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1133.918670][ C1] net_ratelimit: 26 callbacks suppressed [ 1133.918690][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.930174][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.935968][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.941780][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.978912][T13255] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1134.038761][T13247] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1134.082775][T13255] EXT4-fs (loop5): group descriptors corrupted! [ 1134.101995][T13247] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:24 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) iopl(0xfffffffffffffffa) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000440), 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(r4, 0x0, 0xc205fbf8f172697d) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:24 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1134.201054][T13247] EXT4-fs (loop4): get root inode failed [ 1134.221886][T13247] EXT4-fs (loop4): mount failed 15:55:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffb, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:24 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1134.429480][T13247] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1134.495522][T13247] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffd, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1134.558643][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.564490][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1134.570381][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.576148][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1134.582005][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.587774][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1134.695476][T13247] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:24 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1134.743277][T13318] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1134.784890][T13247] EXT4-fs: failed to create workqueue [ 1134.827616][T13247] EXT4-fs (loop4): mount failed [ 1134.838178][T13318] EXT4-fs (loop5): group descriptors corrupted! [ 1134.965953][T13318] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:24 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:24 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0xf, 0x4000000040080002, 0x6) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) write$FUSE_LSEEK(r4, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x3f}}, 0x18) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1135.031878][T13318] EXT4-fs (loop5): group descriptors corrupted! 15:55:24 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:25 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1135.316095][T13361] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1135.445114][T13361] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1135.457759][T13379] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:25 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1135.510916][T13379] EXT4-fs (loop5): group descriptors corrupted! [ 1135.518876][T13361] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:25 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1135.610015][T13361] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1135.627406][T13379] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1135.698901][T13361] EXT4-fs (loop4): get root inode failed [ 1135.705421][T13379] EXT4-fs (loop5): group descriptors corrupted! [ 1135.731862][T13361] EXT4-fs (loop4): mount failed 15:55:25 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:25 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r5, &(0x7f0000000040)={0x1d, r6}, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:25 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1135.869455][T13361] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1135.952291][T13361] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1136.019748][T13361] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1136.065551][T13361] EXT4-fs: failed to create workqueue [ 1136.114365][T13361] EXT4-fs (loop4): mount failed 15:55:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:26 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:26 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1136.366267][T13439] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:26 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1136.490714][T13439] EXT4-fs (loop5): group descriptors corrupted! [ 1136.576520][T13450] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1136.651717][T13439] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:26 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1136.721232][T13439] EXT4-fs (loop5): group descriptors corrupted! [ 1136.738915][T13450] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:26 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1136.776226][T13450] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:26 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="02", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffff9c, 0x84, 0x19, &(0x7f0000000380)={r4, 0xe77}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r5 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1136.948839][T13450] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:26 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1137.035142][T13450] EXT4-fs (loop4): get root inode failed [ 1137.074655][T13450] EXT4-fs (loop4): mount failed 15:55:27 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:27 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1137.308173][T13502] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:27 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1137.399368][T13502] EXT4-fs (loop5): group descriptors corrupted! [ 1137.532858][T13533] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xedc000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:27 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000680)) [ 1137.646970][T13533] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:27 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1b9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:27 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1137.791138][T13533] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1137.838827][T13551] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:27 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1137.954681][T13533] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1137.987017][T13551] EXT4-fs (loop5): group descriptors corrupted! [ 1138.050025][T13533] EXT4-fs (loop4): get root inode failed [ 1138.090912][T13533] EXT4-fs (loop4): mount failed 15:55:28 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ca, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:28 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ba, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1138.168796][T13551] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1138.286590][T13551] EXT4-fs (loop5): group descriptors corrupted! 15:55:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:28 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1bb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:28 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e605, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000680)="118fae5b3173484531341a6a979759eeb0d80bf69a35186da8411b380e977dc7e9992361c0a6397b707b937c11508491949261ec96d3fb8d6d14b32e696e3051add9d1e21ea9feeaf82a6e86959ac468df9ec8b68567469c353ad3fb2d5774bd4ffac76ca82c8e581c561ec794ea0a306a0abc889c62dec251b62796c6a583c46896de5cbdd2847cb909a52259015482b1e113abc8abb2fc6a6ba36d8687c4f6ee492ba45f6f59e40db1b50501c7d09058ee0d74fed711e7", 0xb8, 0x0) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000500)='/dev/audio\x00', 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)="ad029687eef948cb7093ee120372893088b077769a16d8ae1aaebe1a876c0c3cf971add78b77b12f28ef10ba08ff492b6c9905eba50788d2fcf373452a9a47877386c5033c35fdfb907b7a66eeef87750d7d14b2658ed7ae527da745f3ffaf65b44ba27b11fb093ff847ac12237cb4f42f4eeec893e1a33d6a88a0da9907658eea51ce66731b5277a598954a94d1ba0acc8a6e4a56e1c737ee3cf35e387718d8c7a702bd6b57762c7b948be7e49d0edfc55ad96a6da09c7f211e4c7c17dfc4c53276367eaf621477918242fb288651", 0xcf, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000008c0)={r5, r6, r7}, &(0x7f0000000900)=""/230, 0xe6, &(0x7f0000000ac0)={&(0x7f0000000a00)={'rmd128\x00'}, &(0x7f0000000a40)="196d232644915c778591da19bc414505392a76a9cc6b610993213793189c5f5bd08100b5dad870b95c465cee3b0bd87609f702074fc23285d11dae446d370edc5bc58e657390a6bccccd01dd78a09276fa06", 0x52}) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r8}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r9 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:28 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1cb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:28 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1138.644550][T13616] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1138.685453][T13619] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:28 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1bc, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1138.778267][T13616] EXT4-fs (loop5): group descriptors corrupted! [ 1138.918662][T13619] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1138.958175][T13616] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1138.968986][T13619] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1138.988943][T13616] EXT4-fs (loop5): group descriptors corrupted! 15:55:28 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1cc, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1139.116420][T13619] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:29 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:29 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1bd, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1139.259407][T13619] EXT4-fs (loop4): get root inode failed [ 1139.265210][T13619] EXT4-fs (loop4): mount failed [ 1139.364870][T13667] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:29 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r2, 0x0, 0xfffffffffffffc72, 0x10100, &(0x7f00000000c0)={0x77359400}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000480)=0xfe4c) r5 = openat$cgroup_ro(r2, &(0x7f00000004c0)='pids.current\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) kcmp$KCMP_EPOLL_TFD(r6, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r2, &(0x7f0000000440)={0x1d, r7}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r8 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000000b80)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b9007b154a23d4d3ca1e980f25a6ff01462d12eb9d3a809c47b733238ab89a29baf45755b0cfbeb948404980c7f8e94c2e5cb475d8668e506349157c708c88587524583ecec5044c4d13ae9932dbea742921850feeeba58bcb013015c77d655bf49dd24c3e6436a786fe0e23aac3c82bc8b42ead638a194c1a97c160ceab3bfe5cdbe33afc022481ba502787c59b6b779eafd05344dc6fe495dc5b8aad8ac3416009c54668bc72769798d6ded6ba05a14f2efb024be3bfde9a4659bcdc57bc77340dbb8f8ca2368523e61fc770494b9120e11b9bc800db8be37ff84d1e226d7f8993665475a134f89e4e0071073f6554c0ce991f1e97ab2e73cdaae552b2a7aae4c2f3a19d1c6864b18c503f15b6a2a74ae9538fc9bc078dfc25812b5745f153cc2dbe4d7a5abc07003f81b399c6a7cbca02ee9b0b4017262e1859298ebaac610686d2f6cc54c74170c4750273798443a10e4fa9f953e0333dabfeeec3749d469a5fc183197919b705b3f9585c78dbc4b0249b5452d5adbca19681dce7db63c1330899927110959167e2c6a008b597aa45a09c02ae0000000000175d8b240000000000000000000000111f5dd1e842aa8bc0378c989a87400e5b6e3ff9abb95b0f7b747d2d15525d6eef0b1af425e36dede3e32d7b168727d1e47dbb9d76f900aeed5cbe3b39205707b450926a3b0fdab43fdc88510d1634b52ce7e6c3e3592ba1062ffaf85e21f5c0f5a235e00697c24826711813c76fb77723d3c9111145ce0842726055db7b77882acb7d39bd8ec3575ce52895d44e8ae2aa69a182f1484bbad5a3fcbd2d6c0ae02b45995634959d1ffcaa86a6294373c9627ed499adeb49dc8e9eacd3b7ceb4b50f0eb07eaa31887a02fab03fba8fe811754bf132f6c291ce5975fda5fd50650879149077889e8c04bb74d5cfa9833530ad326c72817f696d7f6240b374614cb7f499027822589cadbb607b5d2f3acf463ac035bb0cc5c5a2646b87c122115b779cf3fe7c12698823df76fce0b2865f07047415bd"], &(0x7f0000000040)=0xdd) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1139.466472][T13667] EXT4-fs (loop5): group descriptors corrupted! 15:55:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:29 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1cd, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:29 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1be, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:29 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1139.695910][T13667] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1139.796391][T13667] EXT4-fs (loop5): group descriptors corrupted! [ 1139.847145][T13700] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1139.950769][T13700] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:29 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ce, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1140.026029][T13700] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:29 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1bf, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1140.136914][T13700] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1140.157324][T13725] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1140.158655][ C1] net_ratelimit: 26 callbacks suppressed [ 1140.158663][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.178640][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:55:30 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:30 executing program 3: socketpair$unix(0x1, 0x7, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000680)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x6, 0xffff, 0x9, 0x2, 0x5}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1140.184447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.190291][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1140.297026][T13700] EXT4-fs (loop4): get root inode failed [ 1140.338661][T13725] EXT4-fs (loop5): group descriptors corrupted! [ 1140.343875][T13700] EXT4-fs (loop4): mount failed 15:55:30 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1cf, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1140.423987][T13725] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1140.459046][T13725] EXT4-fs (loop5): group descriptors corrupted! 15:55:30 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7ffffffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:30 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1140.799465][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.806117][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1140.812551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.818626][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1140.825277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.831517][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:55:30 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1140.877199][T13780] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1140.888282][T13782] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1140.963039][T13780] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1140.984705][T13782] EXT4-fs (loop5): group descriptors corrupted! [ 1141.045063][T13780] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1141.124669][T13780] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:31 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1141.192732][T13780] EXT4-fs (loop4): get root inode failed 15:55:31 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1141.241979][T13780] EXT4-fs (loop4): mount failed 15:55:31 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1141.280106][T13807] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:31 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f00000001c0)='@\x89\xfdZp\xfe\xea\xc1]@CQ\xc4\x10rdma.cu\xf2rent\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x100000000, 0x0, 0x0, "e67f462aa2f8fadaf58ec54feaba65f4d72e315fab22d6f441df584720b3eac8", 0x33367f59}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1141.369063][T13807] EXT4-fs (loop5): group descriptors corrupted! [ 1141.424849][T13780] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1141.544042][T13807] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1141.559407][T13780] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:31 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:31 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1141.652944][T13807] EXT4-fs (loop5): group descriptors corrupted! [ 1141.663146][T13780] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1141.790812][T13780] EXT4-fs: failed to create workqueue [ 1141.796229][T13780] EXT4-fs (loop4): mount failed 15:55:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:31 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:32 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:32 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1142.291912][T13884] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:32 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000680)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x1c, r4, 0x101, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xf4043c6983c6d800}, 0x40004) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r5 = openat$cgroup_ro(r1, &(0x7f0000000740)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f00000006c0)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x0, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x7, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x4e24, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1142.428312][T13893] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1142.495734][T13884] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:32 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1142.578716][T13893] EXT4-fs (loop5): group descriptors corrupted! 15:55:32 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1142.660995][T13884] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:32 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1142.744776][T13884] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1142.872511][T13884] EXT4-fs (loop4): get root inode failed [ 1142.920322][T13926] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1142.939278][T13884] EXT4-fs (loop4): mount failed [ 1143.049904][T13926] EXT4-fs (loop5): group descriptors corrupted! 15:55:32 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1143.091698][T13884] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1143.161945][T13884] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:33 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1143.284549][T13884] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1143.465681][T13884] EXT4-fs: failed to create workqueue [ 1143.527022][T13884] EXT4-fs (loop4): mount failed 15:55:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:33 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1143.722127][T13979] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:33 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1143.824540][T13979] EXT4-fs (loop5): group descriptors corrupted! 15:55:33 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1144.091407][T14003] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x300000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:34 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000700)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(r4, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000680)=""/67, 0x43) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:34 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1144.184390][T14003] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1144.240161][T14003] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:34 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1144.348846][T14024] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1144.469027][T14024] EXT4-fs (loop5): group descriptors corrupted! [ 1144.529892][T14003] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:34 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1c9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1144.714372][T14024] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1144.720144][T14003] EXT4-fs (loop4): get root inode failed 15:55:34 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1144.861720][T14024] EXT4-fs (loop5): group descriptors corrupted! [ 1144.891864][T14003] EXT4-fs (loop4): mount failed 15:55:34 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:34 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ca, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:35 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) accept4$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c, 0x80800) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:35 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1145.522471][T14104] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:35 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1145.576726][T14109] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:35 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1cb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1145.655265][T14104] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1145.688701][T14109] EXT4-fs (loop5): group descriptors corrupted! [ 1145.795177][T14104] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1145.923603][T14104] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x500000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:35 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1da, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1146.019474][T14104] EXT4-fs (loop4): get root inode failed 15:55:35 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1cc, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1146.083450][T14104] EXT4-fs (loop4): mount failed 15:55:36 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1146.208109][T14148] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:36 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) socket$tipc(0x1e, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1146.348731][T14148] EXT4-fs (loop5): group descriptors corrupted! 15:55:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:36 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1db, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1146.398612][ C1] net_ratelimit: 26 callbacks suppressed [ 1146.398629][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.410188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1146.415977][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.421814][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:55:36 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1cd, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1146.539699][T14148] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1146.622021][T14148] EXT4-fs (loop5): group descriptors corrupted! [ 1146.632236][T14183] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1146.688059][T14183] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:36 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1dc, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x600000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1146.828960][T14183] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:36 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1146.904616][T14183] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1146.938024][T14208] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1146.986056][T14183] EXT4-fs (loop4): get root inode failed [ 1147.027124][T14183] EXT4-fs (loop4): mount failed [ 1147.038646][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.044499][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1147.050360][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.056129][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1147.062044][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.067831][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1147.096199][T14208] EXT4-fs (loop5): group descriptors corrupted! 15:55:37 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1dd, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1147.204805][T14183] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:37 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ce, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1147.302509][T14183] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x700000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1147.438778][T14183] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1147.510300][T14183] EXT4-fs: failed to create workqueue 15:55:37 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) ioctl$KVM_NMI(r1, 0xae9a) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x153) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000880)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xfffffffffffffe76) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1147.579087][T14183] EXT4-fs (loop4): mount failed [ 1147.610625][T14254] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:37 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:37 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1de, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:37 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1cf, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1147.864306][T14254] EXT4-fs (loop5): group descriptors corrupted! [ 1148.046869][T14254] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1148.059240][T14282] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:37 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1df, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1148.126709][T14282] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:38 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1148.188748][T14254] EXT4-fs (loop5): group descriptors corrupted! [ 1148.197104][T14282] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80400, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x11c, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xda3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x25c8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x49}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5fc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa37d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x94}, 0xc000) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x1) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r6 = openat$cgroup_ro(r3, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r4) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r7, &(0x7f00000007c0)={0x1d, r8}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r9 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1148.259245][T14282] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:38 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:38 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1148.398240][T14282] EXT4-fs (loop4): get root inode failed [ 1148.448412][T14282] EXT4-fs (loop4): mount failed [ 1148.570023][T14319] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1148.607263][T14282] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1148.709514][T14319] EXT4-fs (loop5): group descriptors corrupted! 15:55:38 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1148.775576][T14282] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:38 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1148.873045][T14282] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1148.892374][T14319] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1148.968098][T14282] EXT4-fs: failed to create workqueue [ 1148.998730][T14319] EXT4-fs (loop5): group descriptors corrupted! [ 1149.019064][T14282] EXT4-fs (loop4): mount failed 15:55:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x900000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:39 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:39 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1149.354526][T14375] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1149.395808][T14383] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:39 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1149.497873][T14375] EXT4-fs (loop5): group descriptors corrupted! [ 1149.518660][T14383] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:39 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:39 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) stat(&(0x7f0000000480)='./file1\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000001c0)='./file1/file0\x00', 0x7, 0x1, &(0x7f0000000380)=[{&(0x7f0000000680)="3a09ea331762995343585f3f2da65f7adf41fbe05523a7534713668a13bee234e1dab98ff10fb01f6965515dab19dc38f9e454b3e95a1af84bfa07104f5c23b5b96891b2e4c7e7", 0x47, 0x800}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000", @ANYRESHEX=r7, @ANYBLOB=',usrquota,uid=', @ANYRESHEX=r6, @ANYBLOB="2c75737271756f74612c6572729968567b5f8142a1756e742d726f2c6d61736b3d4d61595f455845432c65756a643c", @ANYRESDEC=r6, @ANYBLOB=',auYit,smackfsdef=/dev/ptmx\x00,\x00']) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1149.542978][T14383] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:39 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1149.668776][T14383] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1149.719672][T14375] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1149.757822][T14383] EXT4-fs (loop4): get root inode failed [ 1149.804355][T14375] EXT4-fs (loop5): group descriptors corrupted! [ 1149.814804][T14383] EXT4-fs (loop4): mount failed 15:55:39 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xa00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1150.012252][T14383] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:39 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1150.092219][T14383] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1150.188049][T14383] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1150.260727][T14383] EXT4-fs: failed to create workqueue [ 1150.310296][T14383] EXT4-fs (loop4): mount failed [ 1150.493269][T14455] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:40 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:40 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1150.610999][T14455] EXT4-fs (loop5): group descriptors corrupted! 15:55:40 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:40 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000680)='rdma.current\x00\xc4B\xec\x120+\x8cfc\xe8\x9a\x1e^1\x80\x17K_|G\x9a\xa9\x9f\x1a\x1b\xcb|C\xf6J\xb3\x9c\x89\xd4I\xd8Q\x97\xce\xcf\x89\xd3\'N[r\x93\x86\xeb\x90\xbc\xd4\xa1', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) pause() perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1004000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1150.971167][T14484] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1151.058969][T14484] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1151.143830][T14503] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:41 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:41 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1151.188639][T14484] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1151.294695][T14503] EXT4-fs (loop5): group descriptors corrupted! [ 1151.356284][T14484] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1151.506243][T14484] EXT4-fs (loop4): get root inode failed 15:55:41 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1151.558572][T14503] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1151.609320][T14484] EXT4-fs (loop4): mount failed 15:55:41 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:41 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1151.648939][T14503] EXT4-fs (loop5): group descriptors corrupted! 15:55:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1f00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:42 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1152.184679][T14574] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:42 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:42 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e605, 0xfffffffffffff026, 0x200000, 0x0, 0x4, 0x800000000000000}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000680)="f23795afdc2707ccb9a67a6f346d1c1b38614dd9ed423661343121babb6c41055d9ef418812e5e16a76739bee05636dae50a42ab3765f909c8230a2719e61796e8d35fadf1ce0b6de5dc6eae843ed2a74888f7", 0x53}, {&(0x7f0000000700)="6b89b6b8a416cabce823b5ac310a97ac3112d2c6fdc101cb31febb34605a49974d3973ad8446f0d9573328d12c39be75c6e102f20859b9ad5fa54346a2796c76755de9763070f0b8dbf589a58744724308a2db6959f03005c8afafddc57d9ce8d61da22c40d78a0646a5e47a7482d9d45f5ec5065b588cd4fcf6850c3406fad205ef26a6836b7407c86d28db38b68d8cd1e698cd23fdec8f5d991f7e0b8adc45c3dd59fc53fb1ffb09ed37a1796a2aa584aa4f41a37ae2a4", 0xb8}], 0x2, 0x0) bind$can_raw(r2, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:42 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1152.265251][T14581] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1152.390185][T14574] EXT4-fs (loop5): group descriptors corrupted! [ 1152.446077][T14581] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1152.535522][T14581] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1152.634242][T14581] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1152.646424][ C1] net_ratelimit: 26 callbacks suppressed [ 1152.646433][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.646485][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.646572][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.646619][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:55:42 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:42 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1152.889894][T14627] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1152.899913][T14627] EXT4-fs (loop5): group descriptors corrupted! [ 1152.907456][T14581] EXT4-fs (loop4): get root inode failed [ 1152.925310][T14581] EXT4-fs (loop4): mount failed 15:55:42 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1152.977741][T14627] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1153.099161][T14627] EXT4-fs (loop5): group descriptors corrupted! 15:55:43 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@reserved}) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2010000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:43 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1d9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:43 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ea, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1153.278697][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1153.284576][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.290456][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1153.296256][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.302126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1153.307901][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.497172][T14677] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1153.525999][T14680] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1153.568802][T14677] EXT4-fs (loop5): group descriptors corrupted! [ 1153.638709][T14680] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:43 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1eb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1153.701714][T14680] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:43 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:43 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1da, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x210f000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1153.821554][T14680] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1154.022374][T14716] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1154.058209][T14680] EXT4-fs (loop4): get root inode failed [ 1154.127345][T14680] EXT4-fs (loop4): mount failed [ 1154.167799][T14716] EXT4-fs (loop5): group descriptors corrupted! 15:55:44 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getpeername(r5, &(0x7f0000000680)=@xdp, &(0x7f0000000040)=0x80) 15:55:44 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ec, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:44 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1db, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1154.415572][T14716] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1154.561177][T14716] EXT4-fs (loop5): group descriptors corrupted! 15:55:44 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ed, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:44 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1dc, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1154.690099][T14754] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1154.778885][T14754] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2300000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1154.905188][T14754] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1155.032302][T14787] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1155.096083][T14754] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:45 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ee, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1155.159136][T14787] EXT4-fs (loop5): group descriptors corrupted! 15:55:45 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1dd, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:45 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1155.252534][T14754] EXT4-fs (loop4): get root inode failed [ 1155.289154][T14754] EXT4-fs (loop4): mount failed 15:55:45 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x40004000000000}) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2d00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:45 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ef, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:45 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1de, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1155.717378][T14835] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1155.833270][T14845] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1155.865656][T14835] EXT4-fs (loop5): group descriptors corrupted! 15:55:45 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1156.017283][T14845] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1156.118732][T14845] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:46 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1df, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1156.234971][T14845] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:46 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1156.296563][T14845] EXT4-fs (loop4): get root inode failed [ 1156.346751][T14877] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1156.408446][T14845] EXT4-fs (loop4): mount failed [ 1156.473450][T14877] EXT4-fs (loop5): group descriptors corrupted! 15:55:46 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000000000}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r2, &(0x7f0000000440)={0x1d, r6}, 0x858ad0fcd27f91c9) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:46 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:46 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1156.937711][T14918] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1156.998830][T14915] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1157.138738][T14918] EXT4-fs (loop5): group descriptors corrupted! [ 1157.173590][T14915] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:47 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1157.349785][T14918] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1157.363125][T14915] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1157.480055][T14918] EXT4-fs (loop5): group descriptors corrupted! [ 1157.515990][T14915] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:47 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:47 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="00fb3302006ef0363878f67db49eb1adf82b515f4e1ede20ee0f07ca03088415306704398b7aea1bd2c813f9401c903c5850ca"], 0x33, 0x1) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(r4, 0x0, 0x37d) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:47 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1157.749036][T14915] EXT4-fs (loop4): get root inode failed [ 1157.803504][T14915] EXT4-fs (loop4): mount failed 15:55:47 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1158.044387][T14986] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1158.058704][T14986] EXT4-fs (loop5): group descriptors corrupted! 15:55:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4c00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1158.382809][T15016] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1158.459374][T15016] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:48 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1158.562400][T15016] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:48 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1158.606742][T15023] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1158.662273][T15016] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1158.672825][T15023] EXT4-fs (loop5): group descriptors corrupted! [ 1158.812460][T15016] EXT4-fs (loop4): get root inode failed 15:55:48 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:48 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1158.858886][T15016] EXT4-fs (loop4): mount failed [ 1158.878616][ C1] net_ratelimit: 26 callbacks suppressed [ 1158.878624][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.890262][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.896086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.901934][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:55:48 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffffa7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000440), 0xffffffffffffff80) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="9d000000fc5708c020f81ee36e737ea0a7ecbacd7ce7544103503b9df05413d2f6e40cb71c89f4bf2add3061b1e6a827c71e8017accee1d4c9084d42781791f4f5d717961d6c0594361573a1ac7fbfeadc79e96485b82246e6a6421ccbb04ba927480f93d2bd360041824b6a0916dbb64a9bba87bae2dcfb1affe785452d56e89588daf53d888d151a00be680be6a47a7f095158f4e9cc5b2bbc39a8f52ce1dc61cb18e3e001d3e732"], &(0x7f00000005c0)=0x2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r4, 0x5}, &(0x7f0000000480)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getpeername$ax25(r1, &(0x7f0000000680)={{0x3, @default}, [@null, @netrom, @rose, @netrom, @null, @remote, @remote, @default]}, &(0x7f0000000040)=0x48) 15:55:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1158.994943][T15016] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1159.061926][T15016] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1159.169373][T15016] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:49 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1159.258928][T15065] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1159.271233][T15016] EXT4-fs: failed to create workqueue 15:55:49 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1159.333238][T15016] EXT4-fs (loop4): mount failed [ 1159.406308][T15065] EXT4-fs (loop5): group descriptors corrupted! [ 1159.518681][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1159.524542][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1159.530401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1159.530449][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1159.541999][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1159.547775][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:55:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1159.563075][T15065] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:49 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1159.683058][T15065] EXT4-fs (loop5): group descriptors corrupted! 15:55:49 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:49 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1159.887568][T15106] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1160.074646][T15106] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1160.156903][T15134] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1160.184692][T15106] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:50 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:50 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1160.234890][T15134] EXT4-fs (loop5): group descriptors corrupted! [ 1160.303149][T15106] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:50 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1160.417694][T15134] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1160.427180][T15106] EXT4-fs (loop4): get root inode failed [ 1160.498632][T15106] EXT4-fs (loop4): mount failed [ 1160.532693][T15134] EXT4-fs (loop5): group descriptors corrupted! 15:55:50 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6c00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:50 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:50 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1160.858056][T15182] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1160.958941][T15182] EXT4-fs (loop5): group descriptors corrupted! [ 1161.014698][T15190] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7400000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:51 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000c001) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r6}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x181201, 0x0) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000040)=0x68973924) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:51 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:51 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1161.206610][T15190] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:51 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1fa, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1161.309828][T15204] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1161.368775][T15204] EXT4-fs (loop5): group descriptors corrupted! [ 1161.373595][T15190] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1161.473162][T15190] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:51 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1e9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1161.578683][T15190] EXT4-fs (loop4): get root inode failed [ 1161.599140][T15190] EXT4-fs (loop4): mount failed [ 1161.686163][T15231] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1161.755198][T15190] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1161.853285][T15231] EXT4-fs (loop5): group descriptors corrupted! 15:55:51 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1fb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1161.912711][T15190] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:51 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1162.028026][T15231] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1162.104287][T15190] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:52 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ea, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1162.176502][T15231] EXT4-fs (loop5): group descriptors corrupted! [ 1162.217024][T15190] EXT4-fs: failed to create workqueue [ 1162.287692][T15190] EXT4-fs (loop4): mount failed 15:55:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7fffffffffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:52 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000004c0)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000680)={0x7c, 0x3, 0x4, 0x4, [], [], [], 0x90e, 0x1, 0x7, 0x2, "1a439d20cb25ab74f5e297fc05513837"}) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:52 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1fc, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:52 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1eb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1162.655701][T15305] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1162.805134][T15323] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1162.832039][T15305] EXT4-fs (loop5): group descriptors corrupted! 15:55:52 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1fd, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1162.946473][T15323] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1163.021662][T15305] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:52 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ec, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1163.081874][T15323] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1163.169907][T15305] EXT4-fs (loop5): group descriptors corrupted! [ 1163.241851][T15323] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1163.299092][T15323] EXT4-fs (loop4): get root inode failed [ 1163.324587][T15323] EXT4-fs (loop4): mount failed 15:55:53 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1fe, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:53 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ed, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1163.915845][T15387] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1164.034467][T15385] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:53 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ee, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1164.098636][T15387] EXT4-fs (loop5): group descriptors corrupted! [ 1164.132945][T15385] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:54 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r4}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:54 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x201, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1164.264885][T15387] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1164.334194][T15385] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:54 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1164.378635][T15387] EXT4-fs (loop5): group descriptors corrupted! [ 1164.487679][T15385] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:54 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x202, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1164.585163][T15385] EXT4-fs (loop4): get root inode failed [ 1164.626652][T15385] EXT4-fs (loop4): mount failed 15:55:54 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1ef, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:54 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:54 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1164.874765][T15449] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:54 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x203, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1164.939234][T15449] EXT4-fs (loop5): group descriptors corrupted! 15:55:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x97ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1165.118625][ C1] net_ratelimit: 26 callbacks suppressed [ 1165.118641][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1165.130204][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1165.135999][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1165.141809][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1165.166640][T15472] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1165.219111][T15472] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:55 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x204, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:55 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1165.268761][T15472] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1165.375841][T15472] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1165.421088][T15487] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:55 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1165.494585][T15472] EXT4-fs (loop4): get root inode failed [ 1165.527336][T15487] EXT4-fs (loop5): group descriptors corrupted! [ 1165.552927][T15472] EXT4-fs (loop4): mount failed 15:55:55 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:55 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x205, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1165.724346][T15472] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1165.758677][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1165.764459][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1165.770367][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1165.776126][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1165.781997][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1165.787753][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:55:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf4ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1165.904944][T15472] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:55 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, 0x0, 0x1a4741cbc5e61c63, 0x2000000010840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1165.989668][T15472] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1166.022202][T15537] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1166.085013][T15472] EXT4-fs: failed to create workqueue [ 1166.099512][T15537] EXT4-fs (loop5): group descriptors corrupted! [ 1166.119141][T15472] EXT4-fs (loop4): mount failed [ 1166.226329][T15537] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:56 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:56 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:56 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x206, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1166.308742][T15537] EXT4-fs (loop5): group descriptors corrupted! 15:55:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf5ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1166.494293][T15565] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1166.548756][T15565] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1166.588748][T15565] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1166.679806][T15565] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1166.708068][T15582] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:56 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x207, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1166.753147][T15582] EXT4-fs (loop5): group descriptors corrupted! [ 1166.769027][T15565] EXT4-fs (loop4): get root inode failed [ 1166.797376][T15565] EXT4-fs (loop4): mount failed 15:55:56 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:56 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)={0x9, {{0xa, 0x4e20, 0xc5c, @dev={0xfe, 0x80, [], 0xe}, 0x7}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x0, @mcast1, 0x4}}, {{0xa, 0x4e23, 0xff, @ipv4={[], [], @empty}, 0x1}}, {{0xa, 0x4e20, 0xa69a, @ipv4={[], [], @loopback}, 0xc86}}, {{0xa, 0x4e20, 0x9, @local, 0x1}}, {{0xa, 0x4e22, 0x401, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}]}, 0x310) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3ffffffffe) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:56 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:55:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1167.423740][T15622] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1167.465830][T15620] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1167.498712][T15622] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1167.549746][T15622] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1167.552369][T15620] EXT4-fs (loop5): group descriptors corrupted! 15:55:57 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x208, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:57 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1167.681141][T15622] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1167.718234][T15622] EXT4-fs (loop4): get root inode failed 15:55:57 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1167.754020][T15622] EXT4-fs (loop4): mount failed [ 1167.859204][T15620] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1167.947546][T15620] EXT4-fs (loop5): group descriptors corrupted! 15:55:57 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x7) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1168.066474][T15622] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:55:57 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:58 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x209, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf9fdffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1168.173774][T15622] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1168.278792][T15622] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1168.337166][T15681] sp0: Synchronizing with TNC [ 1168.358901][T15622] EXT4-fs: failed to create workqueue [ 1168.380561][T15622] EXT4-fs (loop4): mount failed 15:55:58 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x0, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1168.425240][T15690] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1168.510063][T15690] EXT4-fs (loop5): group descriptors corrupted! 15:55:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:58 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:58 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f6, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfbffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1168.785280][T15714] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1168.888603][T15714] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:58 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x0, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1168.936328][T15727] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1168.976470][T15714] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:55:58 executing program 3: socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000003c0)=""/118) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) 15:55:58 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1169.001420][T15727] EXT4-fs (loop5): group descriptors corrupted! 15:55:59 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f7, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1169.106501][T15714] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated 15:55:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1169.219172][T15714] EXT4-fs (loop4): get root inode failed [ 1169.228048][T15714] EXT4-fs (loop4): mount failed [ 1169.370817][T15714] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1169.395373][T15753] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1169.450593][T15714] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:55:59 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:59 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1169.517110][T15753] EXT4-fs (loop5): group descriptors corrupted! [ 1169.541334][T15714] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1169.631072][T15714] EXT4-fs: failed to create workqueue [ 1169.667273][T15714] EXT4-fs (loop4): mount failed [ 1169.703490][T15753] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1169.709090][T15741] IPVS: ftp: loaded support on port[0] = 21 [ 1169.819572][T15753] EXT4-fs (loop5): group descriptors corrupted! 15:55:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:55:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:55:59 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:59 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1f9, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1170.063453][T15793] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1170.085040][T15789] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1170.147751][T15793] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1170.170221][T15789] EXT4-fs (loop5): group descriptors corrupted! [ 1170.217723][T15793] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:56:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfdffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1170.290804][T15793] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1170.358761][T15793] EXT4-fs (loop4): get root inode failed [ 1170.418091][T15793] EXT4-fs (loop4): mount failed [ 1170.516548][T15812] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1170.527812][T15793] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1170.558775][T15812] EXT4-fs (loop5): group descriptors corrupted! [ 1170.568065][T15793] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1170.606549][T15793] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1170.618058][T15793] EXT4-fs: failed to create workqueue [ 1170.629304][T15793] EXT4-fs (loop4): mount failed [ 1170.637018][T15812] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1170.685402][T15812] EXT4-fs (loop5): group descriptors corrupted! [ 1171.358691][ C1] net_ratelimit: 26 callbacks suppressed [ 1171.358700][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1171.370151][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1171.375964][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1171.381777][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1171.998624][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.004392][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1172.010226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.015975][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1172.021787][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.027535][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:56:01 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x0, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:01 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:01 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1fa, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:01 executing program 3: socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000003c0)=""/118) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) 15:56:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xff', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfeffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1172.195290][T15835] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1172.261212][T15835] EXT4-fs (loop5): group descriptors corrupted! 15:56:02 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1fb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:02 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xff0f000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1172.477841][T15831] IPVS: ftp: loaded support on port[0] = 21 15:56:02 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x210, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1172.616065][T15863] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:56:02 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1fc, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1172.676956][T15863] EXT4-fs (loop5): group descriptors corrupted! [ 1172.780562][T15871] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1172.793133][T15863] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1172.863783][T15863] EXT4-fs (loop5): group descriptors corrupted! [ 1172.870549][T15871] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1172.902368][T15871] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1172.983790][T15871] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1173.026236][T15871] EXT4-fs (loop4): get root inode failed [ 1173.052798][T15871] EXT4-fs (loop4): mount failed [ 1173.145664][T15871] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1173.164300][T15871] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1173.198663][T15871] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1173.210005][T15871] EXT4-fs: failed to create workqueue [ 1173.216400][T15871] EXT4-fs (loop4): mount failed 15:56:04 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:04 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x211, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:04 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1fd, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:04 executing program 3: socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000003c0)=""/118) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) [ 1175.009285][T15898] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1175.030082][T15907] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:56:05 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1fe, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1175.079774][T15898] EXT4-fs (loop5): group descriptors corrupted! [ 1175.115103][T15907] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:56:05 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x212, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1175.180649][T15907] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1175.253561][T15907] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1175.329318][T15907] EXT4-fs (loop4): get root inode failed [ 1175.331728][T15905] IPVS: ftp: loaded support on port[0] = 21 [ 1175.358077][T15936] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1175.369842][T15907] EXT4-fs (loop4): mount failed [ 1175.436906][T15936] EXT4-fs (loop5): group descriptors corrupted! 15:56:05 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x201, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:05 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x213, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1175.480320][T15907] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:56:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffff0700, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1175.581877][T15907] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1175.666607][T15907] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1175.744883][T15907] EXT4-fs: failed to create workqueue [ 1175.775681][T15907] EXT4-fs (loop4): mount failed [ 1175.816326][T15957] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1175.903766][T15957] EXT4-fs (loop5): group descriptors corrupted! [ 1176.094201][T15957] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1176.126067][T15957] EXT4-fs (loop5): group descriptors corrupted! 15:56:06 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x202, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:06 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x214, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:06 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xff', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff7f, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:06 executing program 3: socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000003c0)=""/118) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) 15:56:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xff', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:06 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x203, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1176.422735][T15986] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1176.455564][T15986] EXT4-fs (loop5): group descriptors corrupted! 15:56:06 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x215, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1176.688876][T16010] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:56:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xff', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:06 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x216, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:06 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x204, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1176.729346][T16010] EXT4-fs (loop5): group descriptors corrupted! 15:56:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1177.201314][T16038] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) [ 1177.300318][T16038] EXT4-fs (loop5): bad geometry: block count 16 exceeds size of device (1 blocks) [ 1177.598596][ C1] net_ratelimit: 26 callbacks suppressed [ 1177.598601][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1177.610037][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1177.615805][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1177.621594][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:56:07 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xff', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:07 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x205, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:07 executing program 3: socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b62ed7676706d40bc5c80e376980b81", 0x481, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000003c0)=""/118) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) 15:56:07 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x217, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1178.141385][T16057] EXT4-fs (loop5): bad geometry: first data block 0 is beyond end of filesystem (0) 15:56:08 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x218, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1178.238321][T16057] EXT4-fs (loop5): bad geometry: first data block 0 is beyond end of filesystem (0) [ 1178.248656][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.254497][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.260347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.266107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.271950][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.277706][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:56:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xff', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:08 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x206, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1178.457284][T16054] IPVS: ftp: loaded support on port[0] = 21 15:56:08 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x219, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1178.567504][T16093] EXT4-fs (loop5): Invalid log block size: 101711873 15:56:08 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x207, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:10 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x0, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:10 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x21a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:10 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x208, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:10 executing program 3: socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000003c0)=""/118) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) [ 1180.766467][T16117] EXT4-fs (loop5): Invalid log block size: 101711873 [ 1180.790398][T16123] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:56:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:10 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x209, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:10 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x21b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1180.869669][T16123] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1180.904056][T16123] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1180.943769][T16123] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1181.009773][T16137] EXT4-fs (loop5): Invalid log block size: 101711873 [ 1181.028826][T16123] EXT4-fs (loop4): get root inode failed [ 1181.034482][T16123] EXT4-fs (loop4): mount failed 15:56:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:10 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1181.084960][T16113] IPVS: ftp: loaded support on port[0] = 21 [ 1181.199949][T16123] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1181.227249][T16152] EXT4-fs (loop5): Invalid log block size: 101711873 [ 1181.256113][T16123] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:56:11 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x21c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1181.302400][T16123] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1181.338783][T16123] EXT4-fs: failed to create workqueue [ 1181.344971][T16123] EXT4-fs (loop4): mount failed 15:56:13 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x0, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:13 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20b, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:13 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x21d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:13 executing program 3: socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000003c0)=""/118) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) 15:56:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xff', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1183.288179][T16174] EXT4-fs (loop5): Invalid log block size: 101711873 15:56:13 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20c, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:13 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x21e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1183.392957][T16174] EXT4-fs (loop5): Invalid log block size: 101711873 15:56:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1183.581962][T16205] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1183.648731][T16205] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1183.671969][T16180] IPVS: ftp: loaded support on port[0] = 21 15:56:13 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20d, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1183.696406][T16205] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:56:13 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x21f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1183.774240][T16205] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1183.838598][ C1] net_ratelimit: 26 callbacks suppressed [ 1183.838605][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.850124][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1183.855504][T16205] EXT4-fs (loop4): get root inode failed [ 1183.855902][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.867233][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1183.873997][T16205] EXT4-fs (loop4): mount failed [ 1184.035219][T16205] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1184.075292][T16205] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1184.092807][T16205] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1184.118335][T16205] EXT4-fs: failed to create workqueue [ 1184.127364][T16205] EXT4-fs (loop4): mount failed [ 1184.478612][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.484381][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.490188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.495937][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.501741][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.507487][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:56:15 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x0, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:15 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:15 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x220, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:15 executing program 3: socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000003c0)=""/118) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) [ 1185.925961][T16246] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1185.994495][T16246] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:56:15 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x20f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1186.060123][T16246] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:56:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x14, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:15 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x221, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1186.146362][T16246] EXT4-fs error (device loop4): ext4_fill_super:4354: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1186.177937][T16246] EXT4-fs (loop4): get root inode failed [ 1186.184916][T16246] EXT4-fs (loop4): mount failed [ 1186.237658][T16251] IPVS: ftp: loaded support on port[0] = 21 15:56:16 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x222, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:16 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x210, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1186.421556][T16246] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1186.537708][T16246] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1186.548632][T16246] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:56:16 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x223, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1186.583682][T16246] EXT4-fs: failed to create workqueue [ 1186.616325][T16246] EXT4-fs (loop4): mount failed 15:56:16 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x0, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x25, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:16 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x211, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xf9', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:16 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x224, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:16 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffdd4) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000005240)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 15:56:16 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x225, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:16 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x212, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x73, 0xffffffffffffffbf) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ftruncate(r0, 0x9) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x1d, 0xf, 0x5) mq_open(&(0x7f0000000380)='}#*nodevem0\xb7,\x00', 0x800, 0xdc, &(0x7f0000000440)={0x1, 0xfff, 0x7d, 0x2, 0x8, 0xac0, 0x3, 0x8}) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) openat(r5, &(0x7f00000001c0)='./bus\x00', 0x20000, 0x8) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r8 = msgget(0x3, 0x1c0) msgrcv(r8, &(0x7f0000000580)={0x0, ""/103}, 0x6f, 0x3, 0x2000) syz_open_procfs(r7, &(0x7f0000000600)='envh&on\x00\x96\x94\xbb\tc\xc5~\xeb\x15\xc9.\x1d\xf4~yJf\x95 \b\xc5\xf9\x82T^\xb7\x95\xcc\xcbx\xde\xc05\xd4{\xcd$\\4\x1a\xbb\x83\x02R-v\x04d>l-\x9e#\xc2E\xfb\xc2i\xb2\x18\xea\xbd\x8c\xef\xa3\xc5`\x7f\x9cO\xa6\xe1\x1c\xe7\x13\xae\xf2D\xcc,\x86\r\x81{\xba R\x06\xac`\xd3\xae\xf6n=\x05Z\xde\x92\xb1c\xf1\xa7~ \x1e\xad\xfdckz\xe3q1\a\x86,\xac#\x15\x90\xa0a\x83\xf1r\xbb\x15\xaeA\xb1J\x80%\xceka\xa5\x11\x0ecy\xf3\x93\xa1\xbb\\\xdf\xf2Z\xf6a\xd04;\x18\xf4\x82\x02\xceF\\#\x15t \x91') ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000004c0)=@add_del={0x2, &(0x7f0000000180)='dummy0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 15:56:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x67, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x7f', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x73, 0xffffffffffffffbf) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ftruncate(r0, 0x9) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x1d, 0xf, 0x5) mq_open(&(0x7f0000000380)='}#*nodevem0\xb7,\x00', 0x800, 0xdc, &(0x7f0000000440)={0x1, 0xfff, 0x7d, 0x2, 0x8, 0xac0, 0x3, 0x8}) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000009c0)=ANY=[@ANYBLOB="5f6c7465720000b6ffffffffffff3fcfd4b881e50a2054a114e0f9ff00000000000000000000710000001ea122a152d3ebb1dc826573c2365036b3684d7174b2368abb167fcdd5f0c3d45cd9f5d895a7fdb220c37ae0a5734d5c631853c8d0a8f31c33e08f75c7c4a29f64ea7840525bdc1f30e784ced9ae3ebb6e4242d270aad19479c5365576c04a08f9f9a9bb4515c9fbfed7a55058f907000000d7bd89cc5f2bdd0000ca014796d1ae0aa3ce51dc54684fc395737e192fd7e5235d6911011d49ea12f9c187d34bd37b703bb7b74e4067c84e92500ad672c1a643b7a9d10000000000000000732c0000240e0000000000000000000000000000000000121abc87679d343388bfa4c8b0c18cdb72b509b0f0ea0c0d46ddf57ee501fef7d00633ef1dfb04541744517c95f0e600684e20f3ec17edf7cc393774962f960848b88491124f60dad6e6d85526a0ed4eeb79c15db69eb2819bc0c14c4583000a6dc5c00e508833f5f1c7a471e424d5f52566e40c83b012fa277bf078035c88c8b5399801130f5d90d997c1268c4d58d1c840150adddbe790cd95e1367ff091c5df185a14838c9c9bddc45d0044c4d61d9cd915fa544f26f4d9659ad67706e9123c1c8ab85b004fb412ac8e9ccf5f2613ec866a92b8ac25b88d89e777341e7f0000000800000000b291645c777f99fc31dcaa913d1b017417a7a4000000004b98ca1f007317de194427e3c07a6340a873c16fb5660e382c27411e4ad22c9aea71756c6452bd2c69818b45aaadbb942f71dde6ee914847f19052985941e81af2551a6d9b67bb5350c498abad02853d4bf8ccde396112a077538d654e89247a2784df365f8bb9303bba05f913a2f43e007a25a8adccbe80cd6130cfaa3d8e5df6a7590c3dbfd0259275a405e5ce66eb73c3991fdca3418d6361ee5e74ec30604257e10008eff67f788bbc5a31f9ad4e3c8328fd917a5b74803c9dd0668947f97dff72f6614591754f1446f7dc3abbe099841d42f2695340e34552359f7ddfad5316b93afe9ffc30d9023d2c4901f5ec67879200c6472721fda6bf9b96"], 0x0) openat(r5, &(0x7f00000001c0)='./bus\x00', 0x20000, 0x8) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r8 = msgget(0x3, 0x1c0) msgrcv(r8, &(0x7f0000000580)={0x0, ""/103}, 0x6f, 0x3, 0x2000) syz_open_procfs(r7, &(0x7f0000000600)='envh&on\x00\x96\x94\xbb\tc\xc5~\xeb\x15\xc9.\x1d\xf4~yJf\x95 \b\xc5\xf9\x82T^\xb7\x95\xcc\xcbx\xde\xc05\xd4{\xcd$\\4\x1a\xbb\x83\x02R-v\x04d>l-\x9e#\xc2E\xfb\xc2i\xb2\x18\xea\xbd\x8c\xef\xa3\xc5`\x7f\x9cO\xa6\xe1\x1c\xe7\x13\xae\xf2D\xcc,\x86\r\x81{\xba R\x06\xac`\xd3\xae\xf6n=\x05Z\xde\x92\xb1c\xf1\xa7~ \x1e\xad\xfdckz\xe3q1\a\x86,\xac#\x15\x90\xa0a\x83\xf1r\xbb\x15\xaeA\xb1J\x80%\xceka\xa5\x11\x0ecy\xf3\x93\xa1\xbb\\\xdf\xf2Z\xf6a\xd04;\x18\xf4\x82\x02\xceF\\#\x15t \x91') ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000004c0)=@add_del={0x2, &(0x7f0000000180)='dummy0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 15:56:18 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x0, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x300, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:18 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x226, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x73, 0xffffffffffffffbf) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ftruncate(r0, 0x9) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x1d, 0xf, 0x5) mq_open(&(0x7f0000000380)='}#*nodevem0\xb7,\x00', 0x800, 0xdc, &(0x7f0000000440)={0x1, 0xfff, 0x7d, 0x2, 0x8, 0xac0, 0x3, 0x8}) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000009c0)=ANY=[@ANYBLOB="5f6c7465720000b6ffffffffffff3fcfd4b881e50a2054a114e0f9ff00000000000000000000710000001ea122a152d3ebb1dc826573c2365036b3684d7174b2368abb167fcdd5f0c3d45cd9f5d895a7fdb220c37ae0a5734d5c631853c8d0a8f31c33e08f75c7c4a29f64ea7840525bdc1f30e784ced9ae3ebb6e4242d270aad19479c5365576c04a08f9f9a9bb4515c9fbfed7a55058f907000000d7bd89cc5f2bdd0000ca014796d1ae0aa3ce51dc54684fc395737e192fd7e5235d6911011d49ea12f9c187d34bd37b703bb7b74e4067c84e92500ad672c1a643b7a9d10000000000000000732c0000240e0000000000000000000000000000000000121abc87679d343388bfa4c8b0c18cdb72b509b0f0ea0c0d46ddf57ee501fef7d00633ef1dfb04541744517c95f0e600684e20f3ec17edf7cc393774962f960848b88491124f60dad6e6d85526a0ed4eeb79c15db69eb2819bc0c14c4583000a6dc5c00e508833f5f1c7a471e424d5f52566e40c83b012fa277bf078035c88c8b5399801130f5d90d997c1268c4d58d1c840150adddbe790cd95e1367ff091c5df185a14838c9c9bddc45d0044c4d61d9cd915fa544f26f4d9659ad67706e9123c1c8ab85b004fb412ac8e9ccf5f2613ec866a92b8ac25b88d89e777341e7f0000000800000000b291645c777f99fc31dcaa913d1b017417a7a4000000004b98ca1f007317de194427e3c07a6340a873c16fb5660e382c27411e4ad22c9aea71756c6452bd2c69818b45aaadbb942f71dde6ee914847f19052985941e81af2551a6d9b67bb5350c498abad02853d4bf8ccde396112a077538d654e89247a2784df365f8bb9303bba05f913a2f43e007a25a8adccbe80cd6130cfaa3d8e5df6a7590c3dbfd0259275a405e5ce66eb73c3991fdca3418d6361ee5e74ec30604257e10008eff67f788bbc5a31f9ad4e3c8328fd917a5b74803c9dd0668947f97dff72f6614591754f1446f7dc3abbe099841d42f2695340e34552359f7ddfad5316b93afe9ffc30d9023d2c4901f5ec67879200c6472721fda6bf9b96"], 0x0) openat(r5, &(0x7f00000001c0)='./bus\x00', 0x20000, 0x8) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r8 = msgget(0x3, 0x1c0) msgrcv(r8, &(0x7f0000000580)={0x0, ""/103}, 0x6f, 0x3, 0x2000) syz_open_procfs(r7, &(0x7f0000000600)='envh&on\x00\x96\x94\xbb\tc\xc5~\xeb\x15\xc9.\x1d\xf4~yJf\x95 \b\xc5\xf9\x82T^\xb7\x95\xcc\xcbx\xde\xc05\xd4{\xcd$\\4\x1a\xbb\x83\x02R-v\x04d>l-\x9e#\xc2E\xfb\xc2i\xb2\x18\xea\xbd\x8c\xef\xa3\xc5`\x7f\x9cO\xa6\xe1\x1c\xe7\x13\xae\xf2D\xcc,\x86\r\x81{\xba R\x06\xac`\xd3\xae\xf6n=\x05Z\xde\x92\xb1c\xf1\xa7~ \x1e\xad\xfdckz\xe3q1\a\x86,\xac#\x15\x90\xa0a\x83\xf1r\xbb\x15\xaeA\xb1J\x80%\xceka\xa5\x11\x0ecy\xf3\x93\xa1\xbb\\\xdf\xf2Z\xf6a\xd04;\x18\xf4\x82\x02\xceF\\#\x15t \x91') ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000004c0)=@add_del={0x2, &(0x7f0000000180)='dummy0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 15:56:18 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x213, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x8c', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:18 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x227, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xf4', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x37f, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:18 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x214, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1188.709848][T16405] BUG: Bad page state in process syz-executor.3 pfn:7dd30 [ 1188.717545][T16405] page:ffffea0001f74c00 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0x0 15:56:18 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x0, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:18 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x215, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1188.838417][T16405] shmem_aops [ 1188.838426][T16405] name:"memfd:}#*nodevem0·," [ 1188.875198][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) 15:56:18 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x228, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xf5', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) [ 1188.928886][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1189.028783][T16405] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1189.128722][T16405] page dumped because: non-NULL mapping 15:56:19 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x216, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1189.180334][T16405] Modules linked in: [ 1189.291013][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Not tainted 5.0.0-rc7-next-20190222 #41 [ 1189.300166][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1189.310217][T16405] Call Trace: [ 1189.313515][T16405] dump_stack+0x172/0x1f0 [ 1189.317864][T16405] bad_page.cold+0xda/0xff [ 1189.322319][T16405] ? si_mem_available+0x320/0x320 [ 1189.327346][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1189.333615][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1189.339866][T16405] free_pages_check_bad+0x142/0x1a0 [ 1189.345071][T16405] free_unref_page+0x3c6/0x600 [ 1189.349910][T16405] __put_page+0x8d/0xd0 [ 1189.354113][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1189.359927][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1189.365285][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1189.370479][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1189.376459][T16405] ? rw_verify_area+0x118/0x360 [ 1189.381294][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1189.387264][T16405] direct_splice_actor+0x126/0x1a0 [ 1189.392376][T16405] splice_direct_to_actor+0x369/0x970 [ 1189.397737][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1189.403273][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1189.409499][T16405] ? do_splice_to+0x190/0x190 [ 1189.414173][T16405] ? rw_verify_area+0x118/0x360 [ 1189.419017][T16405] do_splice_direct+0x1da/0x2a0 [ 1189.423873][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1189.429424][T16405] ? rw_verify_area+0x118/0x360 [ 1189.434270][T16405] do_sendfile+0x597/0xd00 [ 1189.438678][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1189.443961][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1189.450198][T16405] ? put_timespec64+0xda/0x140 [ 1189.454956][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1189.460193][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1189.465483][T16405] ? do_syscall_64+0x26/0x610 [ 1189.470154][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1189.475428][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1189.480443][T16405] do_syscall_64+0x103/0x610 [ 1189.485028][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1189.490912][T16405] RIP: 0033:0x457e29 [ 1189.494803][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1189.514387][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1189.522780][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1189.530733][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1189.538687][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.546647][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1189.554626][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1189.576939][T16405] Disabling lock debugging due to kernel taint [ 1189.605292][T16405] BUG: Bad page state in process syz-executor.3 pfn:6cb6d [ 1189.642115][T16405] page:ffffea0001b2db40 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0x1 [ 1189.671708][T16405] shmem_aops [ 1189.671715][T16405] name:"memfd:}#*nodevem0·," [ 1189.686611][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1189.710347][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1189.719073][T16405] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 1189.735007][T16405] page dumped because: non-NULL mapping [ 1189.747565][T16405] Modules linked in: [ 1189.751583][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1189.762075][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1189.772123][T16405] Call Trace: [ 1189.775440][T16405] dump_stack+0x172/0x1f0 [ 1189.779772][T16405] bad_page.cold+0xda/0xff [ 1189.784182][T16405] ? si_mem_available+0x320/0x320 [ 1189.789210][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1189.794234][T16405] ? kasan_check_read+0x11/0x20 [ 1189.799083][T16405] free_pages_check_bad+0x142/0x1a0 [ 1189.804318][T16405] free_unref_page+0x3c6/0x600 [ 1189.809075][T16405] __put_page+0x8d/0xd0 [ 1189.813225][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1189.819044][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1189.824401][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1189.829621][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1189.835617][T16405] ? rw_verify_area+0x118/0x360 [ 1189.840460][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1189.846428][T16405] direct_splice_actor+0x126/0x1a0 [ 1189.851532][T16405] splice_direct_to_actor+0x369/0x970 [ 1189.856898][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1189.862443][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1189.868702][T16405] ? do_splice_to+0x190/0x190 [ 1189.873390][T16405] ? rw_verify_area+0x118/0x360 [ 1189.878231][T16405] do_splice_direct+0x1da/0x2a0 [ 1189.883093][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1189.888703][T16405] ? rw_verify_area+0x118/0x360 [ 1189.893550][T16405] do_sendfile+0x597/0xd00 [ 1189.897970][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1189.903252][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1189.909491][T16405] ? put_timespec64+0xda/0x140 [ 1189.914265][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1189.919461][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1189.924749][T16405] ? do_syscall_64+0x26/0x610 [ 1189.929431][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1189.934714][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1189.939724][T16405] do_syscall_64+0x103/0x610 [ 1189.944307][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1189.950190][T16405] RIP: 0033:0x457e29 [ 1189.954070][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1189.973645][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1189.982023][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1189.989963][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1189.997920][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.005867][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1190.013837][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1190.022581][T16405] BUG: Bad page state in process syz-executor.3 pfn:7a80d [ 1190.029780][T16405] page:ffffea0001ea0340 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0x2 [ 1190.038686][T16405] shmem_aops [ 1190.038692][T16405] name:"memfd:}#*nodevem0·," [ 1190.041997][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1190.054412][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1190.063077][T16405] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 1190.071693][T16405] page dumped because: non-NULL mapping [ 1190.077227][T16405] Modules linked in: [ 1190.081195][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1190.081203][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1190.081207][T16405] Call Trace: [ 1190.081223][T16405] dump_stack+0x172/0x1f0 [ 1190.081229][ C1] net_ratelimit: 26 callbacks suppressed [ 1190.081243][T16405] bad_page.cold+0xda/0xff [ 1190.081248][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.081260][T16405] ? si_mem_available+0x320/0x320 [ 1190.081274][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1190.081288][T16405] ? kasan_check_read+0x11/0x20 [ 1190.081293][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.081306][T16405] free_pages_check_bad+0x142/0x1a0 [ 1190.081322][T16405] free_unref_page+0x3c6/0x600 [ 1190.081338][T16405] __put_page+0x8d/0xd0 [ 1190.081365][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1190.081372][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.081383][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1190.081397][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1190.081408][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.081421][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1190.081447][T16405] ? rw_verify_area+0x118/0x360 [ 1190.081468][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1190.204202][T16405] direct_splice_actor+0x126/0x1a0 [ 1190.209311][T16405] splice_direct_to_actor+0x369/0x970 [ 1190.214671][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1190.220198][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1190.226415][T16405] ? do_splice_to+0x190/0x190 [ 1190.231074][T16405] ? rw_verify_area+0x118/0x360 [ 1190.235910][T16405] do_splice_direct+0x1da/0x2a0 [ 1190.240738][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1190.246262][T16405] ? rw_verify_area+0x118/0x360 [ 1190.251092][T16405] do_sendfile+0x597/0xd00 [ 1190.255487][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1190.260747][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1190.266960][T16405] ? put_timespec64+0xda/0x140 [ 1190.271701][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1190.276884][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1190.282144][T16405] ? do_syscall_64+0x26/0x610 [ 1190.286792][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1190.292058][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1190.297056][T16405] do_syscall_64+0x103/0x610 [ 1190.301655][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1190.307528][T16405] RIP: 0033:0x457e29 [ 1190.311416][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1190.331000][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1190.339394][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1190.347353][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1190.355296][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.363253][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1190.371198][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1190.379625][T16405] BUG: Bad page state in process syz-executor.3 pfn:6cfae [ 1190.386817][T16405] page:ffffea0001b3eb80 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0x3 [ 1190.395726][T16405] shmem_aops [ 1190.395742][T16405] name:"memfd:}#*nodevem0·," [ 1190.399418][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1190.411852][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1190.420471][T16405] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 1190.429085][T16405] page dumped because: non-NULL mapping [ 1190.434613][T16405] Modules linked in: [ 1190.438500][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1190.449006][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1190.459045][T16405] Call Trace: [ 1190.462309][T16405] dump_stack+0x172/0x1f0 [ 1190.466628][T16405] bad_page.cold+0xda/0xff [ 1190.471021][T16405] ? si_mem_available+0x320/0x320 [ 1190.476019][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1190.481012][T16405] ? kasan_check_read+0x11/0x20 [ 1190.485831][T16405] free_pages_check_bad+0x142/0x1a0 [ 1190.491009][T16405] free_unref_page+0x3c6/0x600 [ 1190.495748][T16405] __put_page+0x8d/0xd0 [ 1190.499889][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1190.505674][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1190.511036][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1190.516211][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1190.522171][T16405] ? rw_verify_area+0x118/0x360 [ 1190.526995][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1190.532950][T16405] direct_splice_actor+0x126/0x1a0 [ 1190.538045][T16405] splice_direct_to_actor+0x369/0x970 [ 1190.543388][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1190.548922][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1190.555189][T16405] ? do_splice_to+0x190/0x190 [ 1190.559851][T16405] ? rw_verify_area+0x118/0x360 [ 1190.564684][T16405] do_splice_direct+0x1da/0x2a0 [ 1190.569516][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1190.575044][T16405] ? rw_verify_area+0x118/0x360 [ 1190.579885][T16405] do_sendfile+0x597/0xd00 [ 1190.584281][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1190.589543][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1190.595897][T16405] ? put_timespec64+0xda/0x140 [ 1190.600638][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1190.605806][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1190.611088][T16405] ? do_syscall_64+0x26/0x610 [ 1190.615749][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1190.621005][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1190.626014][T16405] do_syscall_64+0x103/0x610 [ 1190.630605][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1190.636478][T16405] RIP: 0033:0x457e29 [ 1190.640343][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1190.659916][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1190.668318][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1190.676263][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1190.684206][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.692349][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1190.700296][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1190.708740][T16405] BUG: Bad page state in process syz-executor.3 pfn:7ce86 [ 1190.715945][T16405] page:ffffea0001f3a180 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0x4 [ 1190.718609][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.724824][T16405] shmem_aops [ 1190.724829][T16405] name:"memfd:}#*nodevem0·," [ 1190.730576][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.733818][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1190.738544][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.744203][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1190.751908][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.757597][T16405] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 1190.766260][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.771924][T16405] page dumped because: non-NULL mapping [ 1190.780519][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.786192][T16405] Modules linked in: [ 1190.801311][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1190.811775][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1190.821805][T16405] Call Trace: [ 1190.825072][T16405] dump_stack+0x172/0x1f0 [ 1190.829394][T16405] bad_page.cold+0xda/0xff [ 1190.833797][T16405] ? si_mem_available+0x320/0x320 [ 1190.838796][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1190.843793][T16405] ? kasan_check_read+0x11/0x20 [ 1190.848661][T16405] free_pages_check_bad+0x142/0x1a0 [ 1190.853877][T16405] free_unref_page+0x3c6/0x600 [ 1190.858611][T16405] __put_page+0x8d/0xd0 [ 1190.862742][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1190.868549][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1190.873915][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1190.879105][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1190.885079][T16405] ? rw_verify_area+0x118/0x360 [ 1190.889912][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1190.895892][T16405] direct_splice_actor+0x126/0x1a0 [ 1190.900989][T16405] splice_direct_to_actor+0x369/0x970 [ 1190.906366][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1190.911917][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1190.918157][T16405] ? do_splice_to+0x190/0x190 [ 1190.922843][T16405] ? rw_verify_area+0x118/0x360 [ 1190.927684][T16405] do_splice_direct+0x1da/0x2a0 [ 1190.932509][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1190.938042][T16405] ? rw_verify_area+0x118/0x360 [ 1190.942872][T16405] do_sendfile+0x597/0xd00 [ 1190.947269][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1190.952526][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1190.958735][T16405] ? put_timespec64+0xda/0x140 [ 1190.963470][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1190.968647][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1190.973914][T16405] ? do_syscall_64+0x26/0x610 [ 1190.978564][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1190.983821][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1190.988828][T16405] do_syscall_64+0x103/0x610 [ 1190.993422][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1190.999296][T16405] RIP: 0033:0x457e29 [ 1191.003168][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1191.022758][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1191.031153][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1191.039097][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1191.047037][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.054996][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1191.062964][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1191.071547][T16405] BUG: Bad page state in process syz-executor.3 pfn:84c4f [ 1191.078769][T16405] page:ffffea00021313c0 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0x5 [ 1191.087606][T16405] shmem_aops [ 1191.087612][T16405] name:"memfd:}#*nodevem0·," [ 1191.090932][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1191.103308][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1191.111915][T16405] raw: 0000000000000005 0000000000000000 00000000ffffffff 0000000000000000 [ 1191.120567][T16405] page dumped because: non-NULL mapping [ 1191.126094][T16405] Modules linked in: [ 1191.130028][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1191.140512][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1191.150537][T16405] Call Trace: [ 1191.153802][T16405] dump_stack+0x172/0x1f0 [ 1191.158106][T16405] bad_page.cold+0xda/0xff [ 1191.162495][T16405] ? si_mem_available+0x320/0x320 [ 1191.167490][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1191.172487][T16405] ? kasan_check_read+0x11/0x20 [ 1191.177319][T16405] free_pages_check_bad+0x142/0x1a0 [ 1191.182491][T16405] free_unref_page+0x3c6/0x600 [ 1191.187231][T16405] __put_page+0x8d/0xd0 [ 1191.191358][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1191.197139][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1191.202493][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1191.207667][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1191.213637][T16405] ? rw_verify_area+0x118/0x360 [ 1191.218462][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1191.224416][T16405] direct_splice_actor+0x126/0x1a0 [ 1191.229505][T16405] splice_direct_to_actor+0x369/0x970 [ 1191.234865][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1191.240407][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1191.246634][T16405] ? do_splice_to+0x190/0x190 [ 1191.251291][T16405] ? rw_verify_area+0x118/0x360 [ 1191.256130][T16405] do_splice_direct+0x1da/0x2a0 [ 1191.260960][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1191.266476][T16405] ? rw_verify_area+0x118/0x360 [ 1191.271316][T16405] do_sendfile+0x597/0xd00 [ 1191.275723][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1191.280997][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1191.287223][T16405] ? put_timespec64+0xda/0x140 [ 1191.291969][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1191.297155][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1191.302412][T16405] ? do_syscall_64+0x26/0x610 [ 1191.307081][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1191.312361][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1191.317357][T16405] do_syscall_64+0x103/0x610 [ 1191.321921][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1191.327781][T16405] RIP: 0033:0x457e29 [ 1191.331648][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1191.351252][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1191.359674][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1191.367614][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1191.375555][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.383494][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1191.391435][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1191.399885][T16405] BUG: Bad page state in process syz-executor.3 pfn:7a869 [ 1191.407121][T16405] page:ffffea0001ea1a40 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0x6 [ 1191.416005][T16405] shmem_aops [ 1191.416021][T16405] name:"memfd:}#*nodevem0·," [ 1191.419339][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1191.431724][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1191.440325][T16405] raw: 0000000000000006 0000000000000000 00000000ffffffff 0000000000000000 [ 1191.448944][T16405] page dumped because: non-NULL mapping [ 1191.454474][T16405] Modules linked in: [ 1191.458400][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1191.468866][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1191.478905][T16405] Call Trace: [ 1191.482189][T16405] dump_stack+0x172/0x1f0 [ 1191.486510][T16405] bad_page.cold+0xda/0xff [ 1191.490904][T16405] ? si_mem_available+0x320/0x320 [ 1191.495945][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1191.500959][T16405] ? kasan_check_read+0x11/0x20 [ 1191.505782][T16405] free_pages_check_bad+0x142/0x1a0 [ 1191.510993][T16405] free_unref_page+0x3c6/0x600 [ 1191.515751][T16405] __put_page+0x8d/0xd0 [ 1191.519896][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1191.525690][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1191.531059][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1191.536231][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1191.542200][T16405] ? rw_verify_area+0x118/0x360 [ 1191.547028][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1191.552983][T16405] direct_splice_actor+0x126/0x1a0 [ 1191.558063][T16405] splice_direct_to_actor+0x369/0x970 [ 1191.563414][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1191.568942][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1191.575151][T16405] ? do_splice_to+0x190/0x190 [ 1191.579797][T16405] ? rw_verify_area+0x118/0x360 [ 1191.584843][T16405] do_splice_direct+0x1da/0x2a0 [ 1191.589667][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1191.595196][T16405] ? rw_verify_area+0x118/0x360 [ 1191.600040][T16405] do_sendfile+0x597/0xd00 [ 1191.604460][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1191.609711][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1191.615921][T16405] ? put_timespec64+0xda/0x140 [ 1191.620659][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1191.625840][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1191.631122][T16405] ? do_syscall_64+0x26/0x610 [ 1191.635772][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1191.641024][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1191.646019][T16405] do_syscall_64+0x103/0x610 [ 1191.650587][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1191.656450][T16405] RIP: 0033:0x457e29 [ 1191.660317][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1191.679889][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1191.688263][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1191.696205][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1191.704163][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.712105][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1191.720058][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1191.728423][T16405] BUG: Bad page state in process syz-executor.3 pfn:7ad87 [ 1191.735677][T16405] page:ffffea0001eb61c0 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0x7 [ 1191.744567][T16405] shmem_aops [ 1191.744582][T16405] name:"memfd:}#*nodevem0·," [ 1191.747887][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1191.760362][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1191.768984][T16405] raw: 0000000000000007 0000000000000000 00000000ffffffff 0000000000000000 [ 1191.777558][T16405] page dumped because: non-NULL mapping [ 1191.783105][T16405] Modules linked in: [ 1191.787002][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1191.797481][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1191.807506][T16405] Call Trace: [ 1191.810779][T16405] dump_stack+0x172/0x1f0 [ 1191.815085][T16405] bad_page.cold+0xda/0xff [ 1191.819472][T16405] ? si_mem_available+0x320/0x320 [ 1191.824468][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1191.829461][T16405] ? kasan_check_read+0x11/0x20 [ 1191.834306][T16405] free_pages_check_bad+0x142/0x1a0 [ 1191.839472][T16405] free_unref_page+0x3c6/0x600 [ 1191.844215][T16405] __put_page+0x8d/0xd0 [ 1191.848339][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1191.854114][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1191.859471][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1191.864639][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1191.870593][T16405] ? rw_verify_area+0x118/0x360 [ 1191.875410][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1191.881357][T16405] direct_splice_actor+0x126/0x1a0 [ 1191.886439][T16405] splice_direct_to_actor+0x369/0x970 [ 1191.891779][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1191.897294][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1191.903505][T16405] ? do_splice_to+0x190/0x190 [ 1191.908172][T16405] ? rw_verify_area+0x118/0x360 [ 1191.913013][T16405] do_splice_direct+0x1da/0x2a0 [ 1191.917833][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1191.923380][T16405] ? rw_verify_area+0x118/0x360 [ 1191.928204][T16405] do_sendfile+0x597/0xd00 [ 1191.932600][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1191.937863][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1191.944074][T16405] ? put_timespec64+0xda/0x140 [ 1191.948813][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1191.954064][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1191.959332][T16405] ? do_syscall_64+0x26/0x610 [ 1191.963981][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1191.969238][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1191.974230][T16405] do_syscall_64+0x103/0x610 [ 1191.978799][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1191.984675][T16405] RIP: 0033:0x457e29 [ 1191.988551][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1192.008154][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1192.016533][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1192.024512][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1192.032462][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.040401][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1192.048344][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1192.056705][T16405] BUG: Bad page state in process syz-executor.3 pfn:7f1f1 [ 1192.063937][T16405] page:ffffea0001fc7c40 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0x8 [ 1192.072818][T16405] shmem_aops [ 1192.072824][T16405] name:"memfd:}#*nodevem0·," [ 1192.076122][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1192.088643][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1192.097223][T16405] raw: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1192.105815][T16405] page dumped because: non-NULL mapping [ 1192.111375][T16405] Modules linked in: [ 1192.115253][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1192.125715][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1192.135743][T16405] Call Trace: [ 1192.139037][T16405] dump_stack+0x172/0x1f0 [ 1192.143339][T16405] bad_page.cold+0xda/0xff [ 1192.147730][T16405] ? si_mem_available+0x320/0x320 [ 1192.152750][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1192.157759][T16405] ? kasan_check_read+0x11/0x20 [ 1192.162581][T16405] free_pages_check_bad+0x142/0x1a0 [ 1192.167746][T16405] free_unref_page+0x3c6/0x600 [ 1192.172480][T16405] __put_page+0x8d/0xd0 [ 1192.176604][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1192.182382][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1192.187724][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1192.192896][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1192.198880][T16405] ? rw_verify_area+0x118/0x360 [ 1192.203722][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1192.209673][T16405] direct_splice_actor+0x126/0x1a0 [ 1192.214758][T16405] splice_direct_to_actor+0x369/0x970 [ 1192.220112][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1192.225649][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1192.231868][T16405] ? do_splice_to+0x190/0x190 [ 1192.236520][T16405] ? rw_verify_area+0x118/0x360 [ 1192.241339][T16405] do_splice_direct+0x1da/0x2a0 [ 1192.246158][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1192.251674][T16405] ? rw_verify_area+0x118/0x360 [ 1192.256491][T16405] do_sendfile+0x597/0xd00 [ 1192.260906][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1192.266185][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1192.272400][T16405] ? put_timespec64+0xda/0x140 [ 1192.277165][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1192.282332][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1192.287586][T16405] ? do_syscall_64+0x26/0x610 [ 1192.292231][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1192.297485][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1192.302483][T16405] do_syscall_64+0x103/0x610 [ 1192.307041][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1192.312902][T16405] RIP: 0033:0x457e29 [ 1192.316762][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1192.336333][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1192.344775][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1192.352716][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1192.360669][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.368621][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1192.376573][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1192.384970][T16405] BUG: Bad page state in process syz-executor.3 pfn:7a3b0 [ 1192.392204][T16405] page:ffffea0001e8ec00 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0x9 [ 1192.401575][T16405] shmem_aops [ 1192.401579][T16405] name:"memfd:}#*nodevem0·," [ 1192.404849][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1192.417263][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1192.425881][T16405] raw: 0000000000000009 0000000000000000 00000000ffffffff 0000000000000000 [ 1192.434469][T16405] page dumped because: non-NULL mapping [ 1192.440052][T16405] Modules linked in: [ 1192.443943][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1192.454408][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1192.464438][T16405] Call Trace: [ 1192.467702][T16405] dump_stack+0x172/0x1f0 [ 1192.472043][T16405] bad_page.cold+0xda/0xff [ 1192.476431][T16405] ? si_mem_available+0x320/0x320 [ 1192.481431][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1192.486436][T16405] ? kasan_check_read+0x11/0x20 [ 1192.491255][T16405] free_pages_check_bad+0x142/0x1a0 [ 1192.496419][T16405] free_unref_page+0x3c6/0x600 [ 1192.501158][T16405] __put_page+0x8d/0xd0 [ 1192.505296][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1192.511087][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1192.516428][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1192.521644][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1192.527609][T16405] ? rw_verify_area+0x118/0x360 [ 1192.532443][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1192.538407][T16405] direct_splice_actor+0x126/0x1a0 [ 1192.543499][T16405] splice_direct_to_actor+0x369/0x970 [ 1192.548865][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1192.554384][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1192.560604][T16405] ? do_splice_to+0x190/0x190 [ 1192.565276][T16405] ? rw_verify_area+0x118/0x360 [ 1192.570105][T16405] do_splice_direct+0x1da/0x2a0 [ 1192.574932][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1192.580452][T16405] ? rw_verify_area+0x118/0x360 [ 1192.585273][T16405] do_sendfile+0x597/0xd00 [ 1192.589664][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1192.595027][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1192.601241][T16405] ? put_timespec64+0xda/0x140 [ 1192.606005][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1192.611178][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1192.616462][T16405] ? do_syscall_64+0x26/0x610 [ 1192.621128][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1192.626401][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1192.631397][T16405] do_syscall_64+0x103/0x610 [ 1192.635961][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1192.641832][T16405] RIP: 0033:0x457e29 [ 1192.645696][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1192.665277][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1192.673654][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1192.681605][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1192.689548][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.697488][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1192.705606][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1192.713972][T16405] BUG: Bad page state in process syz-executor.3 pfn:81f11 [ 1192.721224][T16405] page:ffffea000207c440 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0xa [ 1192.730116][T16405] shmem_aops [ 1192.730132][T16405] name:"memfd:}#*nodevem0·," [ 1192.733419][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1192.745814][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1192.754448][T16405] raw: 000000000000000a 0000000000000000 00000000ffffffff 0000000000000000 [ 1192.763053][T16405] page dumped because: non-NULL mapping [ 1192.768624][T16405] Modules linked in: [ 1192.772527][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1192.782991][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1192.793047][T16405] Call Trace: [ 1192.796308][T16405] dump_stack+0x172/0x1f0 [ 1192.800609][T16405] bad_page.cold+0xda/0xff [ 1192.804993][T16405] ? si_mem_available+0x320/0x320 [ 1192.810011][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1192.815003][T16405] ? kasan_check_read+0x11/0x20 [ 1192.819824][T16405] free_pages_check_bad+0x142/0x1a0 [ 1192.824989][T16405] free_unref_page+0x3c6/0x600 [ 1192.829720][T16405] __put_page+0x8d/0xd0 [ 1192.833854][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1192.839633][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1192.844977][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1192.850151][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1192.856107][T16405] ? rw_verify_area+0x118/0x360 [ 1192.860927][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1192.866882][T16405] direct_splice_actor+0x126/0x1a0 [ 1192.871965][T16405] splice_direct_to_actor+0x369/0x970 [ 1192.877306][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1192.882823][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1192.889029][T16405] ? do_splice_to+0x190/0x190 [ 1192.893673][T16405] ? rw_verify_area+0x118/0x360 [ 1192.898503][T16405] do_splice_direct+0x1da/0x2a0 [ 1192.903333][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1192.908852][T16405] ? rw_verify_area+0x118/0x360 [ 1192.913683][T16405] do_sendfile+0x597/0xd00 [ 1192.918074][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1192.923326][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1192.929537][T16405] ? put_timespec64+0xda/0x140 [ 1192.934278][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1192.939468][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1192.944727][T16405] ? do_syscall_64+0x26/0x610 [ 1192.949392][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1192.954651][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1192.959650][T16405] do_syscall_64+0x103/0x610 [ 1192.964217][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1192.970079][T16405] RIP: 0033:0x457e29 [ 1192.973949][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1192.993522][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1193.001927][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1193.009879][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1193.017820][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1193.025766][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1193.033706][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1193.042188][T16405] BUG: Bad page state in process syz-executor.3 pfn:7a07a [ 1193.049451][T16405] page:ffffea0001e81e80 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0xb [ 1193.058286][T16405] shmem_aops [ 1193.058289][T16405] name:"memfd:}#*nodevem0·," [ 1193.061586][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1193.073959][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1193.082577][T16405] raw: 000000000000000b 0000000000000000 00000000ffffffff 0000000000000000 [ 1193.091176][T16405] page dumped because: non-NULL mapping [ 1193.096701][T16405] Modules linked in: [ 1193.100674][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1193.111164][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1193.121190][T16405] Call Trace: [ 1193.124450][T16405] dump_stack+0x172/0x1f0 [ 1193.128766][T16405] bad_page.cold+0xda/0xff [ 1193.133165][T16405] ? si_mem_available+0x320/0x320 [ 1193.138155][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1193.143181][T16405] ? kasan_check_read+0x11/0x20 [ 1193.148005][T16405] free_pages_check_bad+0x142/0x1a0 [ 1193.153186][T16405] free_unref_page+0x3c6/0x600 [ 1193.157929][T16405] __put_page+0x8d/0xd0 [ 1193.162080][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1193.167887][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1193.173228][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1193.178395][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1193.184349][T16405] ? rw_verify_area+0x118/0x360 [ 1193.189169][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1193.195117][T16405] direct_splice_actor+0x126/0x1a0 [ 1193.200203][T16405] splice_direct_to_actor+0x369/0x970 [ 1193.205545][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1193.211064][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.217292][T16405] ? do_splice_to+0x190/0x190 [ 1193.221965][T16405] ? rw_verify_area+0x118/0x360 [ 1193.226796][T16405] do_splice_direct+0x1da/0x2a0 [ 1193.231621][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1193.237150][T16405] ? rw_verify_area+0x118/0x360 [ 1193.242006][T16405] do_sendfile+0x597/0xd00 [ 1193.246391][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1193.251666][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1193.257882][T16405] ? put_timespec64+0xda/0x140 [ 1193.262618][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1193.267816][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1193.273105][T16405] ? do_syscall_64+0x26/0x610 [ 1193.277788][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1193.283040][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1193.288037][T16405] do_syscall_64+0x103/0x610 [ 1193.292598][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1193.298454][T16405] RIP: 0033:0x457e29 [ 1193.302318][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1193.321905][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1193.330287][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1193.338231][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1193.346197][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1193.354153][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1193.362093][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1193.370647][T16405] BUG: Bad page state in process syz-executor.3 pfn:6dc61 [ 1193.377838][T16405] page:ffffea0001b71840 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0xc [ 1193.386737][T16405] shmem_aops [ 1193.386753][T16405] name:"memfd:}#*nodevem0·," [ 1193.390056][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1193.402462][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1193.411065][T16405] raw: 000000000000000c 0000000000000000 00000000ffffffff 0000000000000000 [ 1193.419654][T16405] page dumped because: non-NULL mapping [ 1193.425214][T16405] Modules linked in: [ 1193.429157][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1193.439649][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1193.449677][T16405] Call Trace: [ 1193.452936][T16405] dump_stack+0x172/0x1f0 [ 1193.457236][T16405] bad_page.cold+0xda/0xff [ 1193.461623][T16405] ? si_mem_available+0x320/0x320 [ 1193.466621][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1193.471619][T16405] ? kasan_check_read+0x11/0x20 [ 1193.476443][T16405] free_pages_check_bad+0x142/0x1a0 [ 1193.481624][T16405] free_unref_page+0x3c6/0x600 [ 1193.486373][T16405] __put_page+0x8d/0xd0 [ 1193.490499][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1193.496272][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1193.501611][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1193.506798][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1193.512755][T16405] ? rw_verify_area+0x118/0x360 [ 1193.517573][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1193.523525][T16405] direct_splice_actor+0x126/0x1a0 [ 1193.528642][T16405] splice_direct_to_actor+0x369/0x970 [ 1193.533987][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1193.539502][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.545707][T16405] ? do_splice_to+0x190/0x190 [ 1193.550365][T16405] ? rw_verify_area+0x118/0x360 [ 1193.555188][T16405] do_splice_direct+0x1da/0x2a0 [ 1193.560013][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1193.565543][T16405] ? rw_verify_area+0x118/0x360 [ 1193.570387][T16405] do_sendfile+0x597/0xd00 [ 1193.574774][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1193.580028][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1193.586509][T16405] ? put_timespec64+0xda/0x140 [ 1193.591253][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1193.596429][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1193.601705][T16405] ? do_syscall_64+0x26/0x610 [ 1193.606362][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1193.611630][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1193.616636][T16405] do_syscall_64+0x103/0x610 [ 1193.621220][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1193.627080][T16405] RIP: 0033:0x457e29 [ 1193.630948][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1193.650524][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1193.658900][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1193.666839][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1193.674814][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1193.682779][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1193.690719][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1193.699105][T16405] BUG: Bad page state in process syz-executor.3 pfn:76a82 [ 1193.706316][T16405] page:ffffea0001daa080 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0xd [ 1193.715205][T16405] shmem_aops [ 1193.715222][T16405] name:"memfd:}#*nodevem0·," [ 1193.718531][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1193.730976][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1193.739614][T16405] raw: 000000000000000d 0000000000000000 00000000ffffffff 0000000000000000 [ 1193.748197][T16405] page dumped because: non-NULL mapping [ 1193.753745][T16405] Modules linked in: [ 1193.757640][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1193.768102][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1193.778126][T16405] Call Trace: [ 1193.781393][T16405] dump_stack+0x172/0x1f0 [ 1193.785695][T16405] bad_page.cold+0xda/0xff [ 1193.790100][T16405] ? si_mem_available+0x320/0x320 [ 1193.795094][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1193.800085][T16405] ? kasan_check_read+0x11/0x20 [ 1193.804905][T16405] free_pages_check_bad+0x142/0x1a0 [ 1193.810071][T16405] free_unref_page+0x3c6/0x600 [ 1193.814802][T16405] __put_page+0x8d/0xd0 [ 1193.818944][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1193.824726][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1193.830078][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1193.835247][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1193.841212][T16405] ? rw_verify_area+0x118/0x360 [ 1193.846031][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1193.851980][T16405] direct_splice_actor+0x126/0x1a0 [ 1193.857065][T16405] splice_direct_to_actor+0x369/0x970 [ 1193.862415][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1193.867931][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.874144][T16405] ? do_splice_to+0x190/0x190 [ 1193.878792][T16405] ? rw_verify_area+0x118/0x360 [ 1193.883609][T16405] do_splice_direct+0x1da/0x2a0 [ 1193.888438][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1193.893963][T16405] ? rw_verify_area+0x118/0x360 [ 1193.898790][T16405] do_sendfile+0x597/0xd00 [ 1193.903183][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1193.908447][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1193.914657][T16405] ? put_timespec64+0xda/0x140 [ 1193.919407][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1193.924575][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1193.929830][T16405] ? do_syscall_64+0x26/0x610 [ 1193.934494][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1193.939762][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1193.944754][T16405] do_syscall_64+0x103/0x610 [ 1193.949340][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1193.955204][T16405] RIP: 0033:0x457e29 [ 1193.959100][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1193.978705][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1193.987084][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1193.995025][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1194.003087][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1194.011029][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1194.018970][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1194.027282][T16405] BUG: Bad page state in process syz-executor.3 pfn:6fd3a [ 1194.034506][T16405] page:ffffea0001bf4e80 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0xe [ 1194.043365][T16405] shmem_aops [ 1194.043382][T16405] name:"memfd:}#*nodevem0·," [ 1194.046686][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1194.059118][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1194.067698][T16405] raw: 000000000000000e 0000000000000000 00000000ffffffff 0000000000000000 [ 1194.076294][T16405] page dumped because: non-NULL mapping [ 1194.081882][T16405] Modules linked in: [ 1194.085759][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1194.096236][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1194.106263][T16405] Call Trace: [ 1194.109524][T16405] dump_stack+0x172/0x1f0 [ 1194.113823][T16405] bad_page.cold+0xda/0xff [ 1194.118211][T16405] ? si_mem_available+0x320/0x320 [ 1194.123217][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1194.128208][T16405] ? kasan_check_read+0x11/0x20 [ 1194.133030][T16405] free_pages_check_bad+0x142/0x1a0 [ 1194.138214][T16405] free_unref_page+0x3c6/0x600 [ 1194.142964][T16405] __put_page+0x8d/0xd0 [ 1194.147092][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1194.152876][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1194.158217][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1194.163400][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1194.169353][T16405] ? rw_verify_area+0x118/0x360 [ 1194.174170][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1194.180118][T16405] direct_splice_actor+0x126/0x1a0 [ 1194.185198][T16405] splice_direct_to_actor+0x369/0x970 [ 1194.190537][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1194.196065][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1194.202288][T16405] ? do_splice_to+0x190/0x190 [ 1194.206936][T16405] ? rw_verify_area+0x118/0x360 [ 1194.211763][T16405] do_splice_direct+0x1da/0x2a0 [ 1194.216584][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1194.222102][T16405] ? rw_verify_area+0x118/0x360 [ 1194.226941][T16405] do_sendfile+0x597/0xd00 [ 1194.231330][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1194.236584][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1194.242794][T16405] ? put_timespec64+0xda/0x140 [ 1194.247527][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1194.252713][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1194.257968][T16405] ? do_syscall_64+0x26/0x610 [ 1194.262616][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1194.267874][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1194.272877][T16405] do_syscall_64+0x103/0x610 [ 1194.277439][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1194.283297][T16405] RIP: 0033:0x457e29 [ 1194.287178][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1194.306763][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1194.315143][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1194.323081][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1194.331022][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1194.338963][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1194.346903][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1194.355253][T16405] BUG: Bad page state in process syz-executor.3 pfn:81f4b [ 1194.362496][T16405] page:ffffea000207d2c0 count:0 mapcount:0 mapping:ffff8880a0baa340 index:0xf [ 1194.371370][T16405] shmem_aops [ 1194.371386][T16405] name:"memfd:}#*nodevem0·," [ 1194.374694][T16405] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1194.387121][T16405] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff8880a0baa340 [ 1194.395720][T16405] raw: 000000000000000f 0000000000000000 00000000ffffffff 0000000000000000 [ 1194.404787][T16405] page dumped because: non-NULL mapping [ 1194.410380][T16405] Modules linked in: [ 1194.414270][T16405] CPU: 0 PID: 16405 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 1194.424745][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1194.434768][T16405] Call Trace: [ 1194.438030][T16405] dump_stack+0x172/0x1f0 [ 1194.442330][T16405] bad_page.cold+0xda/0xff [ 1194.446727][T16405] ? si_mem_available+0x320/0x320 [ 1194.451723][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1194.456716][T16405] ? kasan_check_read+0x11/0x20 [ 1194.461539][T16405] free_pages_check_bad+0x142/0x1a0 [ 1194.466723][T16405] free_unref_page+0x3c6/0x600 [ 1194.471458][T16405] __put_page+0x8d/0xd0 [ 1194.475583][T16405] page_cache_pipe_buf_release+0x12b/0x180 [ 1194.481356][T16405] iter_file_splice_write+0x7d1/0xbe0 [ 1194.486692][T16405] ? atime_needs_update+0x5f0/0x5f0 [ 1194.491862][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1194.497825][T16405] ? rw_verify_area+0x118/0x360 [ 1194.502645][T16405] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1194.508594][T16405] direct_splice_actor+0x126/0x1a0 [ 1194.513675][T16405] splice_direct_to_actor+0x369/0x970 [ 1194.519032][T16405] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1194.524562][T16405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1194.530766][T16405] ? do_splice_to+0x190/0x190 [ 1194.535411][T16405] ? rw_verify_area+0x118/0x360 [ 1194.540229][T16405] do_splice_direct+0x1da/0x2a0 [ 1194.545051][T16405] ? splice_direct_to_actor+0x970/0x970 [ 1194.550597][T16405] ? rw_verify_area+0x118/0x360 [ 1194.555423][T16405] do_sendfile+0x597/0xd00 [ 1194.559812][T16405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1194.565067][T16405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1194.571277][T16405] ? put_timespec64+0xda/0x140 [ 1194.576014][T16405] __x64_sys_sendfile64+0x1dd/0x220 [ 1194.581197][T16405] ? __ia32_sys_sendfile+0x230/0x230 [ 1194.586450][T16405] ? do_syscall_64+0x26/0x610 [ 1194.591108][T16405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1194.596360][T16405] ? trace_hardirqs_on+0x67/0x230 [ 1194.601351][T16405] do_syscall_64+0x103/0x610 [ 1194.605922][T16405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1194.611782][T16405] RIP: 0033:0x457e29 [ 1194.615645][T16405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1194.635218][T16405] RSP: 002b:00007fe6ecbaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1194.643601][T16405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1194.651561][T16405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1194.659527][T16405] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1194.667466][T16405] R10: 0000000000080005 R11: 0000000000000246 R12: 00007fe6ecbaf6d4 [ 1194.675407][T16405] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff 15:56:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x73, 0xffffffffffffffbf) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ftruncate(r0, 0x9) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x1d, 0xf, 0x5) mq_open(&(0x7f0000000380)='}#*nodevem0\xb7,\x00', 0x800, 0xdc, &(0x7f0000000440)={0x1, 0xfff, 0x7d, 0x2, 0x8, 0xac0, 0x3, 0x8}) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) openat(r5, &(0x7f00000001c0)='./bus\x00', 0x20000, 0x8) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r8 = msgget(0x3, 0x1c0) msgrcv(r8, &(0x7f0000000580)={0x0, ""/103}, 0x6f, 0x3, 0x2000) syz_open_procfs(r7, &(0x7f0000000600)='envh&on\x00\x96\x94\xbb\tc\xc5~\xeb\x15\xc9.\x1d\xf4~yJf\x95 \b\xc5\xf9\x82T^\xb7\x95\xcc\xcbx\xde\xc05\xd4{\xcd$\\4\x1a\xbb\x83\x02R-v\x04d>l-\x9e#\xc2E\xfb\xc2i\xb2\x18\xea\xbd\x8c\xef\xa3\xc5`\x7f\x9cO\xa6\xe1\x1c\xe7\x13\xae\xf2D\xcc,\x86\r\x81{\xba R\x06\xac`\xd3\xae\xf6n=\x05Z\xde\x92\xb1c\xf1\xa7~ \x1e\xad\xfdckz\xe3q1\a\x86,\xac#\x15\x90\xa0a\x83\xf1r\xbb\x15\xaeA\xb1J\x80%\xceka\xa5\x11\x0ecy\xf3\x93\xa1\xbb\\\xdf\xf2Z\xf6a\xd04;\x18\xf4\x82\x02\xceF\\#\x15t \x91') ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000004c0)=@add_del={0x2, &(0x7f0000000180)='dummy0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 15:56:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x397, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:56:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\xf6', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 15:56:24 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x229, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:24 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x10000000e609, 0xfffffffffffff026, 0x200000, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x8000000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000004c0)=0x1b4) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x0, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x0, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4000000001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:56:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x217, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x1, 0x198, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000d40], 0x2, 0x0, &(0x7f0000000d40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x25, 0x88ea, 'dummy0\x00', 'netdevsim0\x00', 'team_slave_0\x00', 'rose0\x00', @empty, [0xff, 0xff], @remote, [], 0xc0, 0xc0, 0x108, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffdfffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x210) 15:56:24 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x218, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:56:24 executing program 1: r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x22a, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1195.118605][ C1] net_ratelimit: 18 callbacks suppressed [ 1195.118613][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.130119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.135906][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.141679][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.147445][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.153187][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.438602][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.444392][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1196.488665][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.494432][ C1] protocol 88fb is buggy, dev hsr_slave_1