4 filesystem
[ 2258.225184][T20033] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:42:45 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x60, &(0x7f0000000180))

[ 2258.234661][T20033] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:45 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2272, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:45 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf04a00}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:45 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x68, &(0x7f0000000180))

[ 2258.275103][T20033] loop3: detected capacity change from 0 to 4
[ 2258.283775][T20033] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2258.311198][T20033] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:46 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5416, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:46 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5416, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f92f719bf0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:46 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2275, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:46 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x6c, &(0x7f0000000180))

09:42:46 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf0ff1f}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:46 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2276, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:46 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:46 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x74, &(0x7f0000000180))

09:42:46 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1004000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2259.081241][T20100] loop3: detected capacity change from 0 to 4
[ 2259.100002][T20100] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2259.109682][T20100] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:46 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2279, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:46 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1da7000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2259.155015][T20100] loop3: detected capacity change from 0 to 4
[ 2259.176291][T20100] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2259.193525][T20100] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:47 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5417, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:47 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5417, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:47 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227a, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:47 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f0000edc00000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:47 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7a, &(0x7f0000000180))

09:42:47 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:47 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227b, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:47 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfe, &(0x7f0000000180))

09:42:47 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2259.942876][T20159] loop3: detected capacity change from 0 to 4
[ 2259.954127][T20159] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2259.966648][T20159] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:47 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x18d, &(0x7f0000000180))

09:42:47 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227c, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2260.040802][T20159] loop3: detected capacity change from 0 to 4
[ 2260.060015][T20159] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2260.064390][T20186] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2260.081287][T20159] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:48 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:48 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:48 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:48 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227d, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:48 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1ba, &(0x7f0000000180))

09:42:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000fffffffda0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:48 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227e, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:48 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1f8, &(0x7f0000000180))

[ 2260.806811][T20214] loop3: detected capacity change from 0 to 4
[ 2260.822405][T20214] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2260.831777][T20214] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:48 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:48 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2282, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:48 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6020000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:48 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x204, &(0x7f0000000180))

[ 2260.877419][T20214] loop3: detected capacity change from 0 to 4
[ 2260.904125][T20214] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2260.917385][T20214] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2260.974505][T20250] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:42:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x541b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:49 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:49 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x541b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:49 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffffffff60000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:49 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x207, &(0x7f0000000180))

09:42:49 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2283, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:49 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:49 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2284, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2261.699133][T20275] loop3: detected capacity change from 0 to 4
[ 2261.712872][T20276] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2261.713461][T20275] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2261.732258][T20275] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:49 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:49 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x245, &(0x7f0000000180))

09:42:49 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:49 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2261.786318][T20275] loop3: detected capacity change from 0 to 4
[ 2261.793513][T20275] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2261.826190][T20275] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2261.851537][T20307] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:42:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x541d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:49 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2286, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x541d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:50 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffffffdf90000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:50 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x272, &(0x7f0000000180))

09:42:50 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2287, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:50 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:50 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2288, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:50 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:50 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x300, &(0x7f0000000180))

[ 2262.588162][T20336] loop3: detected capacity change from 0 to 4
[ 2262.598839][T20336] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2262.609554][T20336] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:50 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2262.676080][T20336] loop3: detected capacity change from 0 to 4
[ 2262.684026][T20358] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2262.688330][T20336] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2262.713346][T20336] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:50 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2289, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:51 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:51 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x402, &(0x7f0000000180))

09:42:51 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffffffdfd0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:51 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x4b47, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:51 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:51 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x406, &(0x7f0000000180))

[ 2263.466774][T20397] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2263.471941][T20402] loop3: detected capacity change from 0 to 4
[ 2263.483522][T20402] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2263.499739][T20402] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:51 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x4b49, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:51 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x12000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:51 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x500, &(0x7f0000000180))

[ 2263.555721][T20418] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2263.565300][T20402] loop3: detected capacity change from 0 to 4
[ 2263.582392][T20402] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2263.594054][T20402] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2263.649602][T20437] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:42:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:51 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x13000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:51 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:51 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x5382, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffffffffd0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:51 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x600, &(0x7f0000000180))

09:42:51 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x15dc0000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:52 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1ffff000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:52 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:52 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x604, &(0x7f0000000180))

[ 2264.355520][T20463] loop3: detected capacity change from 0 to 4
[ 2264.363502][T20461] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2264.374155][T20463] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2264.383921][T20463] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:52 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x21000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:52 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x5385, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2264.434317][T20463] loop3: detected capacity change from 0 to 4
[ 2264.452226][T20463] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2264.472304][T20487] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2264.474854][T20463] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:52 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:52 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x27000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:52 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:52 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x700, &(0x7f0000000180))

09:42:52 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:52 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x5386, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffffffffe0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:52 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x48000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:52 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x541b, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:52 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x702, &(0x7f0000000180))

09:42:52 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x5421, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:52 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2265.215208][T20520] loop3: detected capacity change from 0 to 4
[ 2265.236416][T20520] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2265.246873][T20520] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2265.249410][T20523] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2265.298178][T20520] loop3: detected capacity change from 0 to 4
[ 2265.308494][T20520] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2265.330724][T20520] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2265.347975][T20549] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:42:53 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:53 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x5450, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:53 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x68000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00000fff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:53 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x900, &(0x7f0000000180))

09:42:53 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x5451, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:53 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:53 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x5452, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:53 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x74000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2266.087726][T20578] loop3: detected capacity change from 0 to 4
[ 2266.093900][T20573] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2266.108392][T20578] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2266.120285][T20578] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:53 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xa00, &(0x7f0000000180))

09:42:53 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2266.165323][T20578] loop3: detected capacity change from 0 to 4
[ 2266.172005][T20578] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2266.184562][T20578] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2266.221328][T20607] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:42:54 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:54 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x5460, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:54 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffffff7ff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:54 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:54 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xb00, &(0x7f0000000180))

09:42:54 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x40049409, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:54 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x40086602, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:54 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe82a1b00}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:54 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xc00, &(0x7f0000000180))

[ 2266.976659][T20637] loop3: detected capacity change from 0 to 4
[ 2266.986546][T20636] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2266.989918][T20637] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2267.012065][T20637] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:54 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf6ffffff}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:54 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x40087602, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2267.055716][T20637] loop3: detected capacity change from 0 to 4
[ 2267.067278][T20637] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2267.098031][T20661] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2267.100261][T20637] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:55 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:55 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf8010000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:55 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xd00, &(0x7f0000000180))

09:42:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffffffbff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:55 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x401c5820, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:55 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfeffffff}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:55 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xff070000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:55 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xe00, &(0x7f0000000180))

[ 2267.847562][T20692] loop3: detected capacity change from 0 to 4
[ 2267.857468][T20692] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2267.868812][T20692] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2267.871442][T20697] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:42:55 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x4020940d, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:55 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffff7f}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2267.916169][T20692] loop3: detected capacity change from 0 to 4
[ 2267.930412][T20692] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:42:55 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xf00, &(0x7f0000000180))

[ 2267.967266][T20716] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2267.975028][T20692] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2268.062579][T20728] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:42:55 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:55 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x80086601, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:56 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffff7ffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:56 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1020, &(0x7f0000000180))

09:42:56 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x80087601, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:56 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x801c581f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:56 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfffffff6}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:56 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1100, &(0x7f0000000180))

[ 2268.735040][T20761] loop3: detected capacity change from 0 to 4
[ 2268.766430][T20761] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:42:56 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0xc0045878, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:56 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1200, &(0x7f0000000180))

[ 2268.785793][T20761] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2268.854519][T20761] loop3: detected capacity change from 0 to 4
[ 2268.864971][T20761] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2268.881892][T20761] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:56 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0xc0045878, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5428, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5428, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:57 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:57 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffffbffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:57 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2000, &(0x7f0000000180))

09:42:57 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0xc0189436, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:57 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x200000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:57 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x800000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:57 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0xc020660b, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:57 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2010, &(0x7f0000000180))

[ 2269.614604][T20814] loop3: detected capacity change from 0 to 4
[ 2269.629517][T20814] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2269.638888][T20814] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:57 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0xc0481273, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:57 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2269.706701][T20814] loop3: detected capacity change from 0 to 4
[ 2269.726550][T20814] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2269.739774][T20814] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:57 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5437, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5437, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:58 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000001000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:58 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2200, &(0x7f0000000180))

09:42:58 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x2, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:58 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ff9fdffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:58 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:58 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x4, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:58 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2100000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:58 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2500, &(0x7f0000000180))

[ 2270.499782][T20874] loop3: detected capacity change from 0 to 4
[ 2270.523234][T20874] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2270.539732][T20874] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:58 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x1000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:58 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2270.588177][T20874] loop3: detected capacity change from 0 to 4
[ 2270.613577][T20874] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2270.623785][T20874] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:58 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5441, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5441, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:58 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x3f00, &(0x7f0000000180))

09:42:58 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:58 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x2000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:58 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffdfdffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:59 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x540000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:59 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x4000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:59 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4000, &(0x7f0000000180))

[ 2271.369812][T20932] loop3: detected capacity change from 0 to 4
[ 2271.393175][T20932] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:42:59 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x550000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:59 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2271.421320][T20932] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:59 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x570000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2271.466717][T20932] loop3: detected capacity change from 0 to 4
[ 2271.478510][T20932] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2271.489443][T20952] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2271.497668][T20932] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:42:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5450, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5450, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:42:59 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0xfffffdfd, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:59 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7f6007931000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:59 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f7fffffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:42:59 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4502, &(0x7f0000000180))

09:42:59 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7f6007932000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:42:59 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:42:59 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7f6007952000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2272.256658][T20989] loop3: detected capacity change from 0 to 4
[ 2272.267886][T20990] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2272.281504][T20989] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2272.294632][T20989] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:00 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4800, &(0x7f0000000180))

[ 2272.339858][T20989] loop3: detected capacity change from 0 to 4
[ 2272.351360][T20989] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:00 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7f6007b52000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:00 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x2, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2272.380331][T20989] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2272.400777][T21019] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5451, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5451, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:00 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7f6007d52000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:00 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x4, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:00 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f85ffffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:00 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4c00, &(0x7f0000000180))

09:43:00 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x6000, &(0x7f0000000180))

09:43:00 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7f6007f52000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:00 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x1000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:00 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x970000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2273.123640][T21048] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2273.140950][T21055] loop3: detected capacity change from 0 to 4
[ 2273.149644][T21055] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2273.163627][T21055] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:00 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x6800, &(0x7f0000000180))

09:43:00 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x2000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2273.204350][T21055] loop3: detected capacity change from 0 to 4
[ 2273.226587][T21055] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2273.254432][T21055] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:01 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5452, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:01 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5452, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:01 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:01 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x4000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:01 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f8cffffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:01 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x6c00, &(0x7f0000000180))

09:43:01 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10000010000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:01 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7202, &(0x7f0000000180))

09:43:01 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2274.016558][T21119] loop3: detected capacity change from 0 to 4
[ 2274.028968][T21119] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:01 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10400000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:01 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7400, &(0x7f0000000180))

09:43:01 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0xfffffdfd, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2274.078987][T21119] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2274.123147][T21119] loop3: detected capacity change from 0 to 4
[ 2274.132921][T21119] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2274.147094][T21119] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:01 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7a00, &(0x7f0000000180))

09:43:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x545d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:02 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x109307607f0000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:02 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:02 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x545d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:02 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f97ffffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:02 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x8d01, &(0x7f0000000180))

[ 2274.853433][T21171] loop3: detected capacity change from 0 to 4
[ 2274.868830][T21171] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:02 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x209307607f0000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:02 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xba01, &(0x7f0000000180))

09:43:02 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x2, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2274.896226][T21171] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:02 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x209507607f0000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:02 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:02 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xedc0, &(0x7f0000000180))

[ 2274.974424][T21171] loop3: detected capacity change from 0 to 4
[ 2274.986063][T21171] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2275.001878][T21171] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5460, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:03 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x20b507607f0000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:03 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xf801, &(0x7f0000000180))

09:43:03 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:03 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000fdaffffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:03 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5460, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:03 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfeff, &(0x7f0000000180))

09:43:03 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2275.762906][T21241] loop3: detected capacity change from 0 to 4
[ 2275.775976][T21241] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2275.788884][T21241] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:03 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x20d507607f0000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:03 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xff0f, &(0x7f0000000180))

09:43:03 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x20f507607f0000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:03 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ff6ffffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2275.846052][T21241] loop3: detected capacity change from 0 to 4
[ 2275.861468][T21241] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2275.871900][T21241] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2275.931214][T21282] loop3: detected capacity change from 0 to 4
[ 2275.949569][T21282] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2275.963400][T21282] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2276.013276][T21282] loop3: detected capacity change from 0 to 4
[ 2276.019860][T21282] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2276.029562][T21282] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:04 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x40049409, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:04 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x4, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:04 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfffe, &(0x7f0000000180))

09:43:04 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x40000100000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffdffffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x40049409, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:04 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x70da0100000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:04 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2276.653893][T21308] loop3: detected capacity change from 0 to 4
[ 2276.683351][T21308] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:04 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x20000, &(0x7f0000000180))

[ 2276.697566][T21308] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:04 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc04f0000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:04 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:04 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf04a0000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2276.787702][T21308] loop3: detected capacity change from 0 to 4
[ 2276.797501][T21308] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2276.808012][T21308] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x40086602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:05 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf0ff1f00000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:05 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x80000, &(0x7f0000000180))

09:43:05 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x4, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:05 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffeffffff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:05 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x40086602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:05 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:05 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x80040, &(0x7f0000000180))

09:43:05 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2277.537445][T21369] loop3: detected capacity change from 0 to 4
[ 2277.559810][T21369] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2277.573564][T21369] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:05 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:05 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x400000, &(0x7f0000000180))

09:43:05 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x2, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2277.631500][T21369] loop3: detected capacity change from 0 to 4
[ 2277.643599][T21369] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2277.677926][T21369] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2277.681117][T21404] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:06 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x40087602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:06 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:06 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1000000, &(0x7f0000000180))

09:43:06 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x4, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000000200000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x40087602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:06 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:06 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x400000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2278.437839][T21427] loop3: detected capacity change from 0 to 4
[ 2278.450333][T21431] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2278.454682][T21427] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2278.468151][T21427] EXT4-fs (loop3): Can't read superblock on 2nd try
09:43:06 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x2000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:06 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2000000, &(0x7f0000000180))

09:43:06 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2278.512013][T21427] loop3: detected capacity change from 0 to 4
[ 2278.523041][T21427] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:06 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x4000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2278.562771][T21427] EXT4-fs (loop3): Can't read superblock on 2nd try
[ 2278.576070][T21460] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:06 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x401c5820, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:06 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x600000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:06 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xfdfdffff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000000300000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:06 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2040000, &(0x7f0000000180))

09:43:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x401c5820, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:06 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x602000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:07 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x700000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:07 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xfffffdfd, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:07 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:07 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x3000000, &(0x7f0000000180))

[ 2279.331082][T21491] loop3: detected capacity change from 0 to 4
[ 2279.351621][T21491] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2279.360825][T21491] EXT4-fs (loop3): bad block size 8192
09:43:07 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2279.402593][T21491] loop3: detected capacity change from 0 to 4
[ 2279.412295][T21491] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2279.421549][T21491] EXT4-fs (loop3): bad block size 8192
[ 2279.435380][T21516] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:07 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x4020940d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:07 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x900000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:07 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0})

09:43:07 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000000400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:07 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4000000, &(0x7f0000000180))

09:43:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x4020940d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:07 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:07 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000000600000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:07 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0})

[ 2280.178848][T21543] loop3: detected capacity change from 0 to 4
[ 2280.188795][T21540] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2280.205009][T21543] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2280.214305][T21543] EXT4-fs (loop3): bad block size 16384
09:43:07 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:07 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x5000000, &(0x7f0000000180))

09:43:07 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0})

[ 2280.305480][T21570] loop3: detected capacity change from 0 to 4
[ 2280.318752][T21570] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2280.327899][T21570] EXT4-fs (loop3): bad block size 65536
[ 2280.331257][T21576] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:08 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80045432, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:08 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:08 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0})

09:43:08 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000000700000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:08 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x6000000, &(0x7f0000000180))

09:43:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80045432, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:08 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:08 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x6040000, &(0x7f0000000180))

[ 2281.061893][T21599] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2281.071710][T21598] loop3: detected capacity change from 0 to 4
[ 2281.088239][T21598] EXT4-fs (loop3): Invalid log block size: 7
09:43:08 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0})

09:43:08 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:08 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0})

09:43:08 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000000800000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2281.170397][T21598] loop3: detected capacity change from 0 to 4
[ 2281.184847][T21598] EXT4-fs (loop3): Invalid log block size: 7
[ 2281.243230][T21642] loop3: detected capacity change from 0 to 4
[ 2281.254149][T21642] EXT4-fs (loop3): Invalid log block size: 8
[ 2281.282247][T21642] loop3: detected capacity change from 0 to 4
[ 2281.288872][T21642] EXT4-fs (loop3): Invalid log block size: 8
09:43:09 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80045440, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:09 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:09 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7000000, &(0x7f0000000180))

09:43:09 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0})

09:43:09 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000000a00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:09 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80045440, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:09 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:09 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2281.919375][T21660] loop3: detected capacity change from 0 to 4
[ 2281.933067][T21661] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2281.943615][T21660] EXT4-fs (loop3): Invalid log block size: 10
09:43:09 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7020000, &(0x7f0000000180))

09:43:09 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:09 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x8000000, &(0x7f0000000180))

09:43:09 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0})

[ 2282.007605][T21660] loop3: detected capacity change from 0 to 4
[ 2282.024883][T21660] EXT4-fs (loop3): Invalid log block size: 10
[ 2282.086635][T21700] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80086601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:10 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1300000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000000f00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:10 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0})

09:43:10 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x9000000, &(0x7f0000000180))

09:43:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80086601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

[ 2282.784974][T21717] loop3: detected capacity change from 0 to 4
[ 2282.801920][T21719] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2282.809111][T21717] EXT4-fs (loop3): Invalid log block size: 15
09:43:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000001400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:10 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xa000000, &(0x7f0000000180))

09:43:10 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x15dc000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:10 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0})

09:43:10 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2700000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:10 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0})

[ 2282.926119][T21750] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2282.928288][T21753] loop3: detected capacity change from 0 to 4
[ 2282.957001][T21753] EXT4-fs (loop3): Invalid log block size: 20
[ 2282.994492][T21753] loop3: detected capacity change from 0 to 4
[ 2283.001042][T21753] EXT4-fs (loop3): Invalid log block size: 20
09:43:11 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80087601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:11 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xb000000, &(0x7f0000000180))

09:43:11 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0})

09:43:11 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000001800000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80087601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:11 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xc000000, &(0x7f0000000180))

[ 2283.718877][T21782] loop3: detected capacity change from 0 to 4
[ 2283.730693][T21784] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2283.749944][T21782] EXT4-fs (loop3): Invalid log block size: 24
09:43:11 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0})

09:43:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:11 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xd000000, &(0x7f0000000180))

09:43:11 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000fffff888108a8391800000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2283.812520][T21782] loop3: detected capacity change from 0 to 4
[ 2283.813303][T21803] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2283.827360][T21782] EXT4-fs (loop3): Invalid log block size: 24
[ 2283.904858][T21823] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2283.914021][T21826] loop3: detected capacity change from 0 to 4
[ 2283.926565][T21826] EXT4-fs (loop3): Invalid log block size: 24
[ 2283.952484][T21826] loop3: detected capacity change from 0 to 4
[ 2283.959540][T21826] EXT4-fs (loop3): Invalid log block size: 24
09:43:12 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:12 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x801c581f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:12 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xe000000, &(0x7f0000000180))

09:43:12 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0})

09:43:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000fffff8881311c621800000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x801c581f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:12 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:12 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2284.641987][T21847] loop3: detected capacity change from 0 to 4
[ 2284.649727][T21847] EXT4-fs (loop3): Invalid log block size: 24
[ 2284.659404][T21845] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:12 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7400000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:12 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xf000000, &(0x7f0000000180))

09:43:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000002e00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2284.701201][T21847] loop3: detected capacity change from 0 to 4
[ 2284.711032][T21847] EXT4-fs (loop3): Invalid log block size: 24
09:43:12 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0})

09:43:12 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2284.770010][T21878] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2284.776888][T21882] loop3: detected capacity change from 0 to 4
[ 2284.799319][T21882] EXT4-fs (loop3): Invalid log block size: 46
[ 2284.872132][T21882] loop3: detected capacity change from 0 to 4
[ 2284.878654][T21882] EXT4-fs (loop3): Invalid log block size: 46
09:43:13 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:13 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x10000000, &(0x7f0000000180))

09:43:13 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:13 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0})

09:43:13 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:13 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000003f00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:13 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0})

09:43:13 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe82a1b0000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2285.521404][T21907] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:13 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x11000000, &(0x7f0000000180))

09:43:13 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf6ffffff00000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:13 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0})

09:43:13 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000006400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2285.598833][T21928] loop3: detected capacity change from 0 to 4
[ 2285.608439][T21928] EXT4-fs (loop3): Invalid log block size: 63
[ 2285.633404][T21935] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2285.692615][T21951] loop3: detected capacity change from 0 to 4
[ 2285.708321][T21951] EXT4-fs (loop3): Invalid log block size: 100
[ 2285.751665][T21951] loop3: detected capacity change from 0 to 4
[ 2285.760458][T21951] EXT4-fs (loop3): Invalid log block size: 100
09:43:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf801000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:14 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x12000000, &(0x7f0000000180))

09:43:14 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0})

09:43:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000007e00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfeffffff00000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:14 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0})

[ 2286.394344][T21969] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:14 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x20000000, &(0x7f0000000180))

09:43:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xff07000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:14 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0})

09:43:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffff7f00000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2286.472783][T21987] loop3: detected capacity change from 0 to 4
[ 2286.493653][T21987] EXT4-fs (loop3): Invalid log block size: 126
[ 2286.508157][T21994] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2286.561435][T21987] loop3: detected capacity change from 0 to 4
[ 2286.581225][T21987] EXT4-fs (loop3): Invalid log block size: 126
09:43:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:14 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffffff00000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:14 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x20100000, &(0x7f0000000180))

09:43:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000008000000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:14 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

09:43:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:15 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x22000000, &(0x7f0000000180))

09:43:15 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

09:43:15 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2287.338644][T22045] loop3: detected capacity change from 0 to 4
[ 2287.348848][T22045] EXT4-fs (loop3): Invalid log block size: 128
[ 2287.377698][T22053] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:15 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000038700000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2287.405792][T22060] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2287.414202][T22060] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2287.447805][T22060] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2287.451088][T22066] loop3: detected capacity change from 0 to 4
[ 2287.456247][T22060] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2287.463702][T22066] EXT4-fs (loop3): Invalid log block size: 135
[ 2287.505988][T22066] loop3: detected capacity change from 0 to 4
[ 2287.512521][T22066] EXT4-fs (loop3): Invalid log block size: 135
09:43:15 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:15 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x25000000, &(0x7f0000000180))

09:43:15 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:15 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:15 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:15 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:15 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x3f000000, &(0x7f0000000180))

[ 2288.167205][T22087] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2288.195699][T22088] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2288.198033][T22097] loop3: detected capacity change from 0 to 4
09:43:15 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:15 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

[ 2288.204175][T22088] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2288.225778][T22097] EXT4-fs (loop3): Invalid log block size: 145
[ 2288.229657][T22088] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2288.239338][T22099] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2288.240350][T22088] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:15 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x40000000, &(0x7f0000000180))

[ 2288.291048][T22112] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2288.299421][T22112] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2288.316446][T22097] loop3: detected capacity change from 0 to 4
[ 2288.325215][T22112] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:16 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039200000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2288.333630][T22112] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2288.345759][T22097] EXT4-fs (loop3): Invalid log block size: 145
[ 2288.354192][T22122] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2288.397684][T22133] loop3: detected capacity change from 0 to 4
[ 2288.407875][T22133] EXT4-fs (loop3): Invalid log block size: 146
[ 2288.409004][T22134] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2288.422426][T22134] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2288.454122][T22133] loop3: detected capacity change from 0 to 4
[ 2288.461484][T22133] EXT4-fs (loop3): Invalid log block size: 146
09:43:16 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:16 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x40000800, &(0x7f0000000180))

09:43:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

09:43:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2288.995830][T22149] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2289.004218][T22149] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2289.008701][T22151] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2289.029595][T22149] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:16 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:16 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039300000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2289.038000][T22149] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:16 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x45020000, &(0x7f0000000180))

09:43:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2289.092430][T22169] loop3: detected capacity change from 0 to 4
[ 2289.103580][T22169] EXT4-fs (loop3): Invalid log block size: 147
[ 2289.111810][T22172] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2289.120167][T22172] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

09:43:16 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x48000000, &(0x7f0000000180))

[ 2289.157201][T22186] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2289.165667][T22186] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2289.180208][T22169] loop3: detected capacity change from 0 to 4
[ 2289.187211][T22169] EXT4-fs (loop3): Invalid log block size: 147
[ 2289.209092][T22186] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2289.217476][T22186] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2289.237197][T22195] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:17 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:17 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:17 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:17 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4c000000, &(0x7f0000000180))

[ 2289.904700][T22213] loop3: detected capacity change from 0 to 4
[ 2289.914874][T22214] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2289.923367][T22214] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2289.924053][T22213] EXT4-fs (loop3): Invalid log block size: 148
[ 2289.943842][T22215] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:17 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

09:43:17 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:17 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x53efffff, &(0x7f0000000180))

[ 2289.952706][T22214] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2289.961121][T22214] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2289.983779][T22213] loop3: detected capacity change from 0 to 4
[ 2289.996752][T22213] EXT4-fs (loop3): Invalid log block size: 148
09:43:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:17 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039500000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2290.058607][T22243] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2290.067038][T22243] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2290.085465][T22243] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2290.093904][T22243] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:17 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2290.096573][T22251] loop3: detected capacity change from 0 to 4
09:43:17 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x60000000, &(0x7f0000000180))

09:43:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

[ 2290.142077][T22251] EXT4-fs (loop3): Invalid log block size: 149
[ 2290.173613][T22262] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2290.182011][T22262] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2290.196456][T22262] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2290.197042][T22266] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2290.204954][T22262] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2290.224116][T22251] loop3: detected capacity change from 0 to 4
[ 2290.245714][T22251] EXT4-fs (loop3): Invalid log block size: 149
09:43:18 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:18 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:18 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x68000000, &(0x7f0000000180))

[ 2290.785418][T22288] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2290.793794][T22288] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2290.801077][T22290] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:18 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:18 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

09:43:18 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039600000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:18 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:18 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x6c000000, &(0x7f0000000180))

[ 2290.895621][T22307] loop3: detected capacity change from 0 to 4
[ 2290.906993][T22309] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2290.915393][T22309] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2290.928648][T22307] EXT4-fs (loop3): Invalid log block size: 150
[ 2290.934962][T22312] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:18 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:18 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039700000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2290.943255][T22309] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2290.951640][T22309] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:18 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:18 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x72020000, &(0x7f0000000180))

[ 2291.005120][T22325] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2291.013600][T22325] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2291.018509][T22329] loop3: detected capacity change from 0 to 4
[ 2291.035094][T22329] EXT4-fs (loop3): Invalid log block size: 151
[ 2291.050103][T22325] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2291.058539][T22325] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2291.094133][T22329] loop3: detected capacity change from 0 to 4
[ 2291.101012][T22329] EXT4-fs (loop3): Invalid log block size: 151
09:43:19 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:19 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:19 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x74000000, &(0x7f0000000180))

[ 2291.669150][T22355] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2291.675584][T22358] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2291.677577][T22355] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:19 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:19 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

09:43:19 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039800000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:19 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x11, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:19 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7a000000, &(0x7f0000000180))

[ 2291.818584][T22377] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2291.820107][T22382] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2291.826908][T22378] loop3: detected capacity change from 0 to 4
[ 2291.833719][T22382] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2291.854892][T22378] EXT4-fs (loop3): Invalid log block size: 152
09:43:19 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x85ffffff, &(0x7f0000000180))

09:43:19 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039900000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:19 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

[ 2291.868605][T22382] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2291.877014][T22382] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:19 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x12, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2291.947811][T22406] loop3: detected capacity change from 0 to 4
[ 2291.954971][T22408] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2291.959714][T22406] EXT4-fs (loop3): Invalid log block size: 153
[ 2291.963623][T22408] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2291.999036][T22408] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2292.007559][T22408] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2292.027577][T22406] loop3: detected capacity change from 0 to 4
[ 2292.036451][T22406] EXT4-fs (loop3): Invalid log block size: 153
09:43:20 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:20 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:20 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x8cffffff, &(0x7f0000000180))

09:43:20 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:20 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039a00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:20 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x13, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:20 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

09:43:20 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x8d010000, &(0x7f0000000180))

09:43:20 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x21, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:20 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

[ 2292.691110][T22447] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2292.695150][T22448] loop3: detected capacity change from 0 to 4
[ 2292.699489][T22447] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2292.711056][T22448] EXT4-fs (loop3): Invalid log block size: 154
09:43:20 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x92f719bf, &(0x7f0000000180))

09:43:20 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039b00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2292.756915][T22461] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2292.765313][T22461] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2292.782597][T22448] loop3: detected capacity change from 0 to 4
[ 2292.789807][T22448] EXT4-fs (loop3): Invalid log block size: 154
09:43:20 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x27, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2292.808833][T22461] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2292.817244][T22461] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2292.874613][T22480] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2292.882702][T22481] loop3: detected capacity change from 0 to 4
[ 2292.883032][T22480] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2292.891450][T22481] EXT4-fs (loop3): Invalid log block size: 155
[ 2292.909653][T22480] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2292.918051][T22480] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2292.945712][T22481] loop3: detected capacity change from 0 to 4
[ 2292.952723][T22481] EXT4-fs (loop3): Invalid log block size: 155
09:43:21 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x1000000, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:21 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x97ffffff, &(0x7f0000000180))

09:43:21 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x1000000, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:21 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:21 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:21 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000000039c00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:21 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xba010000, &(0x7f0000000180))

09:43:21 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00000000000026c400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2293.528175][T22518] loop3: detected capacity change from 0 to 4
[ 2293.536051][T22518] EXT4-fs (loop3): Invalid log block size: 156
[ 2293.536413][T22519] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2293.550667][T22519] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:21 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

09:43:21 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xbf19f792, &(0x7f0000000180))

09:43:21 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2293.578452][T22519] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2293.586843][T22519] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2293.590056][T22528] loop3: detected capacity change from 0 to 4
09:43:21 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

[ 2293.645772][T22528] EXT4-fs (loop3): Invalid log block size: 196
[ 2293.655881][T22546] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2293.664301][T22546] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2293.680855][T22546] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2293.689223][T22546] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2293.706123][T22528] loop3: detected capacity change from 0 to 4
[ 2293.725071][T22528] EXT4-fs (loop3): Invalid log block size: 196
09:43:21 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:21 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x68, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2294.285448][T22567] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2294.293818][T22567] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:22 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xc0ed0000, &(0x7f0000000180))

09:43:22 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000})

09:43:22 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00000000000026d000000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:22 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2294.381051][T22579] loop3: detected capacity change from 0 to 4
[ 2294.389697][T22581] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2294.400585][T22583] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2294.404955][T22579] EXT4-fs (loop3): Invalid log block size: 208
[ 2294.408958][T22583] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:22 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x74, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:22 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xdaffffff, &(0x7f0000000180))

[ 2294.430417][T22583] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2294.438771][T22583] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2294.460331][T22579] loop3: detected capacity change from 0 to 4
[ 2294.471732][T22579] EXT4-fs (loop3): Invalid log block size: 208
09:43:22 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000})

09:43:22 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xf6ffffff, &(0x7f0000000180))

[ 2294.493253][T22598] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2294.501639][T22598] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2294.526366][T22598] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:22 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000007ffffff200000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2294.534793][T22598] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2294.573467][T22612] loop3: detected capacity change from 0 to 4
[ 2294.593703][T22612] EXT4-fs (loop3): Invalid log block size: 242
[ 2294.650907][T22612] loop3: detected capacity change from 0 to 4
[ 2294.657510][T22612] EXT4-fs (loop3): Invalid log block size: 242
09:43:22 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:22 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2295.136778][T22631] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2295.145279][T22631] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:22 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000})

09:43:22 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xf8010000, &(0x7f0000000180))

09:43:22 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000007ffffff800000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:22 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1f8, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2295.251075][T22645] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2295.252062][T22647] loop3: detected capacity change from 0 to 4
[ 2295.259448][T22645] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2295.272125][T22647] EXT4-fs (loop3): Invalid log block size: 248
[ 2295.291861][T22645] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:22 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x206, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:22 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff})

[ 2295.300307][T22645] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:23 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xf9fdffff, &(0x7f0000000180))

09:43:23 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000007ffffff900000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:23 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfdfdffff, &(0x7f0000000180))

[ 2295.342313][T22647] loop3: detected capacity change from 0 to 4
[ 2295.350083][T22647] EXT4-fs (loop3): Invalid log block size: 248
[ 2295.372631][T22666] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2295.381026][T22666] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2295.417175][T22666] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2295.420185][T22677] loop3: detected capacity change from 0 to 4
[ 2295.425634][T22666] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2295.433579][T22677] EXT4-fs (loop3): Invalid log block size: 249
[ 2295.483003][T22677] loop3: detected capacity change from 0 to 4
[ 2295.492277][T22677] EXT4-fs (loop3): Invalid log block size: 249
09:43:23 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:23 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd})

09:43:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:23 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x300, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:23 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000007ffffffe00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:23 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfdffffff, &(0x7f0000000180))

09:43:23 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2296.105827][T22712] loop3: detected capacity change from 0 to 4
[ 2296.112534][T22710] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2296.120903][T22710] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2296.132188][T22712] EXT4-fs (loop3): Invalid log block size: 254
[ 2296.140797][T22710] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:23 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfeffffff, &(0x7f0000000180))

09:43:23 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x500, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:23 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

[ 2296.149195][T22710] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:23 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

09:43:23 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000ffffffffffffffffe00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2296.214617][T22733] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2296.223079][T22733] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2296.258362][T22733] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2296.263673][T22743] loop3: detected capacity change from 0 to 4
[ 2296.266765][T22733] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2296.276524][T22743] EXT4-fs (loop3): Invalid log block size: 254
09:43:24 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x1000000, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:24 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xff0f0000, &(0x7f0000000180))

09:43:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x1000000, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:24 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x600, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:24 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000})

09:43:24 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000007fffffff00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:24 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfffbffff, &(0x7f0000000180))

09:43:24 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000})

[ 2296.993060][T22770] loop3: detected capacity change from 0 to 4
[ 2297.001805][T22770] EXT4-fs (loop3): Invalid log block size: 255
[ 2297.009128][T22772] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2297.017565][T22772] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:24 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffef53, &(0x7f0000000180))

09:43:24 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x602, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2297.039598][T22772] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2297.048021][T22772] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2297.070019][T22770] loop3: detected capacity change from 0 to 4
[ 2297.086970][T22770] EXT4-fs (loop3): Invalid log block size: 255
09:43:24 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfffffbff, &(0x7f0000000180))

09:43:24 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000})

[ 2297.104336][T22796] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2297.112723][T22796] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:25 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xfdfdffff, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00000000ffffffff00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2297.692504][T22822] loop3: detected capacity change from 0 to 4
[ 2297.701517][T22822] EXT4-fs (loop3): Invalid log block size: 255
[ 2297.730509][T22822] loop3: detected capacity change from 0 to 4
[ 2297.737073][T22822] EXT4-fs (loop3): Invalid log block size: 255
09:43:25 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xfdfdffff, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:25 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x700, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:25 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff})

09:43:25 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfffffdf9, &(0x7f0000000180))

09:43:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f0007ffffffffffff00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:25 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfffffdfd, &(0x7f0000000180))

09:43:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000fffffffffffffffff00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:25 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x900, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:25 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd})

[ 2297.868324][T22844] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2297.870571][T22841] loop3: detected capacity change from 0 to 4
[ 2297.876816][T22844] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2297.886259][T22841] EXT4-fs (loop3): Invalid log block size: 255
09:43:25 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffff7f, &(0x7f0000000180))

[ 2297.950771][T22860] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2297.959146][T22860] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2297.978569][T22860] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2297.986960][T22860] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2297.993080][T22868] loop3: detected capacity change from 0 to 4
[ 2298.006528][T22868] EXT4-fs (loop3): Invalid log block size: 255
[ 2298.044282][T22868] loop3: detected capacity change from 0 to 4
[ 2298.050939][T22868] EXT4-fs (loop3): Invalid log block size: 255
09:43:26 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xfffffdfd, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:26 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2298.545153][T22891] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2298.553622][T22891] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:26 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xfffffdfd, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:26 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffff85, &(0x7f0000000180))

09:43:26 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:26 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000200000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:26 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:26 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

09:43:26 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffff8c, &(0x7f0000000180))

[ 2298.740757][T22903] loop3: detected capacity change from 0 to 4
[ 2298.752950][T22905] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2298.753094][T22903] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2298.761394][T22905] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2298.770740][T22903] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:26 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2298.829930][T22905] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2298.838459][T22905] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2298.852832][T22903] loop3: detected capacity change from 0 to 4
[ 2298.863153][T22903] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:26 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffff97, &(0x7f0000000180))

09:43:26 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

[ 2298.883618][T22903] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2298.924387][T22939] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2298.932815][T22939] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:27 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000300000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2299.386426][T22953] loop3: detected capacity change from 0 to 4
[ 2299.396058][T22953] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2299.406240][T22953] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2299.456861][T22953] loop3: detected capacity change from 0 to 4
[ 2299.463463][T22953] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2299.474590][T22953] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:27 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:27 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffffda, &(0x7f0000000180))

09:43:27 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000})

09:43:27 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000400000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2299.608766][T22980] loop3: detected capacity change from 0 to 4
[ 2299.619872][T22982] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2299.628268][T22982] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2299.631656][T22980] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:27 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfffffff6, &(0x7f0000000180))

09:43:27 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000})

[ 2299.659859][T22980] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2299.671273][T22982] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2299.679651][T22982] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:27 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2299.712520][T22980] loop3: detected capacity change from 0 to 4
[ 2299.719028][T22980] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2299.734106][T22980] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:27 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfffffffd, &(0x7f0000000180))

09:43:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000500000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2299.766996][T23005] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2299.775393][T23005] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2299.796378][T23005] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2299.804786][T23005] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2299.837423][T23019] loop3: detected capacity change from 0 to 4
[ 2299.846922][T23019] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2299.862163][T23019] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2299.920083][T23019] loop3: detected capacity change from 0 to 4
[ 2299.930327][T23019] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2299.939761][T23019] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:27 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000000, 0x0, "00e1000000001000000008000000001d00"})

09:43:27 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1100, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2300.257968][T23034] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2300.266338][T23034] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2300.280322][T23034] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2300.288881][T23034] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:28 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000000, 0x0, "00e1000000001000000008000000001d00"})

09:43:28 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000})

09:43:28 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfffffffe, &(0x7f0000000180))

09:43:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000600000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:28 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1200, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:28 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1000000000, &(0x7f0000000180))

[ 2300.506092][T23054] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2300.507405][T23055] loop3: detected capacity change from 0 to 4
[ 2300.514495][T23054] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2300.534437][T23054] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2300.542850][T23054] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:28 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1300, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:28 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x8000000000, &(0x7f0000000180))

09:43:28 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff})

[ 2300.546747][T23055] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2300.563912][T23055] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2300.615808][T23070] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2300.624183][T23070] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2300.643913][T23055] loop3: detected capacity change from 0 to 4
[ 2300.651617][T23070] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:28 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x15dc, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2300.659993][T23070] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2300.674162][T23055] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2300.685071][T23055] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2300.718841][T23085] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2300.727321][T23085] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2300.741478][T23085] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2300.749856][T23085] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:28 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "00e1000000001000000008000000001d00"})

09:43:28 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd})

09:43:28 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "00e1000000001000000008000000001d00"})

09:43:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000700000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:28 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x80000000000, &(0x7f0000000180))

09:43:28 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2700, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:28 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0xed, 0x8}, 'port0\x00', 0x2, 0x80410, 0x5, 0xed2, 0x80000000, 0x7, 0x1, 0x0, 0xebf7377c4388fcc5, 0x41})
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000489000/0x3000)=nil, 0x3000, 0x0, 0x40010, r1, 0x10000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r0, 0x0, &(0x7f0000000080)="d9e76caf0f2869417e25c8dad333fea154e7806dd995fc6d0e81504aaef962d4890dfe91c0db5063cae47554530ff3c487f2e83eff98e1e3795d9903a93b851f5d20e977535af04f028ae3e95e89d5d3de8bfe28e33fd0ee5eca14244d5b33339c713e6a1f5266230287ad64699a16da40a1f773a5a5c2c7af86b5fd877d06540247df27c80b4978f55cb8c68b058c8ffaf9f4819a37a3a7add3ec1a9b5a4238", 0xa0, 0x4000, 0x0, {0x0, r3}}, 0x8001)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0})

09:43:29 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xedc000000000, &(0x7f0000000180))

[ 2301.376933][T23119] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2301.377172][T23121] loop3: detected capacity change from 0 to 4
[ 2301.385351][T23119] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2301.396641][T23121] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2301.415406][T23121] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:29 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80a00, 0x0)
recvmmsg$unix(r2, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000001380)=""/166, 0xa6}], 0x6, &(0x7f0000001440)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001480)=""/229, 0xe5}, {&(0x7f0000001580)=""/166, 0xa6}, {&(0x7f0000001640)=""/210, 0xd2}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000001740)=""/96, 0x60}], 0x5, &(0x7f0000001840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/52, 0x34}, {&(0x7f0000001940)=""/46, 0x2e}, {&(0x7f0000001980)=""/11, 0xb}], 0x3}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/242, 0xf2}, {&(0x7f0000001b80)=""/217, 0xd9}], 0x2, &(0x7f0000001cc0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000010000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001d00)=""/201, 0xc9}, {&(0x7f0000001e00)=""/207, 0xcf}, {&(0x7f0000001f00)=""/73, 0x49}, {&(0x7f0000001f80)=""/66, 0x42}, {&(0x7f0000002000)=""/137, 0x89}], 0x5, &(0x7f0000004200)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000004300)=@abs, 0x6e, &(0x7f0000005900)=[{&(0x7f0000004380)=""/252, 0xfc}, {&(0x7f0000004480)=""/201, 0xc9}, {&(0x7f0000002140)}, {&(0x7f0000004580)=""/201, 0xc9}, {&(0x7f0000004680)=""/191, 0xbf}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/115, 0x73}, {&(0x7f00000057c0)=""/109, 0x6d}, {&(0x7f0000005840)=""/89, 0x59}, {&(0x7f00000058c0)=""/23, 0x17}], 0xa, &(0x7f00000059c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005a00), 0x6e, &(0x7f0000006e80)=[{&(0x7f0000005a80)=""/171, 0xab}, {&(0x7f0000005b40)=""/1, 0x1}, {&(0x7f0000005b80)=""/39, 0x27}, {&(0x7f0000005bc0)=""/175, 0xaf}, {&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000006c80)=""/94, 0x5e}, {&(0x7f0000006d00)=""/153, 0x99}, {&(0x7f0000006dc0)=""/141, 0x8d}], 0x8, &(0x7f0000006f00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000006f80)=@abs, 0x6e, &(0x7f0000008200)=[{&(0x7f0000007000)=""/191, 0xbf}, {&(0x7f00000070c0)=""/240, 0xf0}, {&(0x7f00000071c0)=""/4096, 0x1000}, {&(0x7f00000081c0)=""/13, 0xd}], 0x4, &(0x7f0000008240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}], 0x8, 0x0, &(0x7f00000084c0))

[ 2301.428303][T23119] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2301.436860][T23119] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2301.462192][T23121] loop3: detected capacity change from 0 to 4
09:43:29 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2301.476049][T23121] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2301.498023][T23121] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2301.508027][T23141] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2301.516413][T23141] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:29 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
r4 = io_uring_setup(0x7bc3, &(0x7f0000000100)={0x0, 0x3e4d, 0x10, 0x2, 0x288, 0x0, r0})
socket$inet(0x2, 0x6000000000000003, 0x4)
sendfile(r1, r4, 0x0, 0x1f)
futimesat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xea60}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r6, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000800000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2301.530593][T23141] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2301.538975][T23141] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2301.601567][T23152] loop3: detected capacity change from 0 to 4
[ 2301.612673][T23152] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2301.622335][T23152] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2301.690102][T23152] loop3: detected capacity change from 0 to 4
[ 2301.699860][T23152] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2301.709753][T23152] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:29 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffdfd, 0x0, "00e1000000001000000008000000001d00"})

09:43:29 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1000000000000, &(0x7f0000000180))

09:43:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffdfd, 0x0, "00e1000000001000000008000000001d00"})

09:43:29 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4800, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:29 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
mmap(&(0x7f000031c000/0x3000)=nil, 0x3000, 0x5, 0x10, r0, 0x43cca000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000900000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:29 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2000000000000, &(0x7f0000000180))

[ 2302.240340][T23188] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2302.240451][T23192] loop3: detected capacity change from 0 to 4
[ 2302.248759][T23188] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2302.259092][T23192] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:29 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7ffffffffffff, &(0x7f0000000180))

09:43:29 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x1, 0x0, 0x36e8000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x0, 0x3, 0x81, 0x0, 0x5, 0x4001, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x2, @perf_config_ext={0x20, 0x1000}, 0x12c0, 0x8, 0xfffffffd, 0x4, 0xfffffffffffffbff, 0x7, 0x1, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xc, r1, 0x9)
fgetxattr(r3, &(0x7f0000000140)=@random={'osx.', '/dev/sg#\x00'}, &(0x7f0000000180)=""/29, 0x1d)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000380)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x9, "d5e7a04ddc9f55"})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002200)={r4})
r5 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x4c0a03)
ioctl$SG_IO(r5, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:29 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2302.288202][T23188] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2302.296601][T23188] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2302.308425][T23192] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:30 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = pidfd_open(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000180)=""/230, 0xe6}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/21, 0x15}, {&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/134, 0x86}], 0x7, 0xff, 0x10000)
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000080)={0x3, 0xed, "810fac662d67847436d00e7b52e6d9c08b6590431491a858d047f735af8f9f79512a8293b3b8a3972e133a1dcf2b025edf7b78ac1750e8433a74ce6197ec306bd475c538498741de2296134f9b930f448898878d0ccf75cb996d952685f869963c01ec9b16ee9d6223d099f4c0b66f8259e587bcaf5eb0b34882721026a4cf1e0baa9d3c89cef03834280d3c347d70c6ea26c96c3778cf54d32c25b2e1c4f82069fe6762be5a1bcd55d2fdf76126a3caa089f11dab38df1adf7d65a3025e3e5548084792314102b98af6eb3086d9d4897d6f2c416cbb8d9850d5b5adab4db2e9eeb704e05e8d060cb214b5e3eb"})
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2302.344665][T23192] loop3: detected capacity change from 0 to 4
[ 2302.356472][T23192] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2302.374260][T23192] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:30 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x40000000000000, &(0x7f0000000180))

[ 2302.388226][T23215] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2302.396618][T23215] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:30 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:30 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5400, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2302.851129][T23238] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2302.859531][T23238] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:30 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000a00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:30 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
fcntl$addseals(r0, 0x409, 0x6)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40000, 0x3)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={0x80, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x406}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3c}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40d0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$sg(&(0x7f0000000140), 0x3, 0x501000)
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000540))
recvmmsg(r4, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
fsetxattr$security_capability(r4, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x1, 0x40}]}, 0xc, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x5)

09:43:30 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x100000000000000, &(0x7f0000000180))

09:43:30 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5500, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2303.093874][T23248] loop3: detected capacity change from 0 to 4
[ 2303.107464][T23254] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2303.113753][T23248] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2303.115869][T23254] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:30 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
r2 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x50002009})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="4587776de6bd2053976902371642269e7201177dfd311c61e8a114", 0x1b}, {&(0x7f0000000140)="24a497abff9d70c72a217661fff1016468896c13086879f14cc7766f0b11776f3e5af1895fa64bfbbf0466762c59a93b6a83d3cd2d369b2381d8e4f9a6d21b", 0x3f}], 0x2, 0xa)

09:43:30 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5700, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:30 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x200000000000000, &(0x7f0000000180))

[ 2303.126143][T23248] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2303.148578][T23254] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2303.156994][T23254] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000b00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2303.198515][T23276] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2303.207018][T23276] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2303.232541][T23285] loop3: detected capacity change from 0 to 4
09:43:30 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2303.240807][T23285] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2303.245432][T23276] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2303.253864][T23285] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2303.258257][T23276] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2303.285971][T23285] loop3: detected capacity change from 0 to 4
[ 2303.292991][T23285] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2303.303117][T23285] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:31 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6800, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:31 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000011000000008000000001d00"})

[ 2303.707974][T23301] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2303.716454][T23301] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2303.730584][T23301] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2303.739015][T23301] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:31 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000011000000008000000001d00"})

09:43:31 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x204000000000000, &(0x7f0000000180))

09:43:31 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000c00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:31 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0x782ed184, 0x4)
sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x98, 0x6}, 0x18)
openat(r1, &(0x7f0000000180)='./file0\x00', 0x2000, 0xc2)
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1)
dup3(r0, r2, 0x80000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x186)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:31 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2303.971102][T23319] loop3: detected capacity change from 0 to 4
[ 2303.971753][T23317] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2303.979415][T23319] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2303.985598][T23317] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2304.007164][T23319] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:31 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x300000000000000, &(0x7f0000000180))

09:43:31 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000d00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2304.019958][T23317] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2304.028303][T23317] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:31 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7400, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:31 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000000200)=""/227, 0xe3}], 0x2, 0x9, 0x1f)
creat(&(0x7f0000000540)='./file0\x00', 0x85)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68)
ioctl$SG_IO(r3, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$vcsu(&(0x7f0000000600), 0x401, 0x480)
io_uring_setup(0x7830, &(0x7f0000000640)={0x0, 0x5c1d, 0xc, 0x0, 0x38b, 0x0, r4})
r5 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x1, 0x3f, 0x2, 0x7, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0x6af6d169dd8cd5bc}, 0x8000, 0x6, 0x80000000, 0x7, 0x80, 0x81, 0x9, 0x0, 0x1000, 0x0, 0x3}, r0, 0xa, r3, 0x18)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x9, 0x40, 0x4, 0x0, 0x6, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1b8c, 0x2, @perf_config_ext={0x400, 0x3ff}, 0x40000, 0x2, 0x3, 0x5, 0x4, 0x4, 0x7fff, 0x0, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x7, r5, 0x8)

[ 2304.100602][T23338] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2304.103401][T23339] loop3: detected capacity change from 0 to 4
[ 2304.109027][T23338] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2304.116821][T23339] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2304.139515][T23338] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:31 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x400000000000000, &(0x7f0000000180))

09:43:31 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2304.147940][T23338] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2304.166991][T23339] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2304.203730][T23352] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2304.212189][T23352] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2304.226381][T23339] loop3: detected capacity change from 0 to 4
[ 2304.233981][T23352] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2304.242394][T23352] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2304.254711][T23339] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2304.266030][T23339] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:32 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1fffffdfd1000000008000000001d00"})

09:43:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1fffffdfd1000000008000000001d00"})

09:43:32 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fsmount(r0, 0x0, 0x5)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14)

09:43:32 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x500000000000000, &(0x7f0000000180))

09:43:32 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9700, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000e00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2304.831394][T23382] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2304.834326][T23383] loop3: detected capacity change from 0 to 4
[ 2304.839857][T23382] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2304.858329][T23382] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2304.862219][T23383] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:32 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xdc15, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:32 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x600000000000000, &(0x7f0000000180))

09:43:32 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
io_setup(0x2, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="a0", 0x1, 0x7fffffffffffffff}])
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x4000000000edb9)
io_submit(r4, 0x4, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000140)="10c38875a127392b394ef1648c7b14a5bd5f80cba3411b129ed82642d0fa322f4582cccc32c752ccf9b1dcd1edc67a94cbcb0a41557d279c2ae32729e0b2cd686db24176bf7b1af8a4ae8421ec02567763ccf12e5a6593e660ce1e08de650a9007208f42d8c2f52bd2e93611816a3a389b0e13378829c51217de643c5c4fe57e4ea4d9d2e3a54ac3ba", 0x89, 0xffffffffffff6bbf, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x4, r1, &(0x7f0000000240)="ab7fe35331c5e0dc27e4408518473050d802c806928fd0dd3ebd51039b793c58f9c9e95baf085ae2afe3afa0bb17f38dcc11f648e97af4a0447ca8aaee20dc47551816575927cf485e40cef5aa5984c02c89dce5f4519f792e09e378cade86f65d8f78fd16251436644ebb3751d0bb2d44382e01d20ca86ca560cbde44385e961da9eb7409bf457158a03075b678d50aa526aa302daea69068a21c6e94f909a70781e1668924af8d14c1228c2c7175aea5", 0xb1, 0x5, 0x0, 0x1, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x3, r2, &(0x7f0000000400)="db23c09f9e58d2f3ebdb05d45664abd61caf76cd0792f469aefd0c3d8657e7ec093454786309609c473b275c2ebeda2ba9cd30fdba7e040a6e507c96cce89cdd170e0903a1d295e652d6b4c369059f3e3e9cdb7a357b2ff6793056a245d6eaf1613a66d9d65ae6372cdd0a", 0x6b, 0xfff, 0x0, 0x3, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0xbe6, 0xffffffffffffffff, &(0x7f00000004c0)="fcfff78cac39e9233542b9c7e0aa2f5243044d21fd0590cbb819ce602cdb9a3baede733d66c811ba4da51a5b5578d4b189ea30df1dc1897634fe49d2b2e150411222a3", 0x43, 0x0, 0x0, 0x1}])
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400100, 0x102)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6)
ioctl$SG_IO(r8, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2304.866717][T23382] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2304.887599][T23383] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2304.918466][T23394] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2304.926889][T23394] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2304.948226][T23383] loop3: detected capacity change from 0 to 4
[ 2304.963490][T23383] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2304.972826][T23383] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000f00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2304.978366][T23394] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2304.990704][T23394] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:32 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf801, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:32 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x604000000000000, &(0x7f0000000180))

[ 2305.076930][T23420] loop3: detected capacity change from 0 to 4
[ 2305.086025][T23421] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2305.089887][T23420] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2305.094475][T23421] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2305.103923][T23420] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2305.128857][T23421] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2305.137236][T23421] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2305.181657][T23420] loop3: detected capacity change from 0 to 4
[ 2305.192637][T23420] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2305.201914][T23420] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:33 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1fdfdffff1000000008000000001d00"})

09:43:33 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1fdfdffff1000000008000000001d00"})

09:43:33 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x3000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000840)={<r5=>0x0, ""/256, <r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0)
r8 = openat$incfs(r4, &(0x7f0000000040)='.pending_reads\x00', 0xc8700, 0xc7)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000000a40)={r7, r5, "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", "149e3996db373b907f73ffa22b608a40c90c313b174363274ea358f522482d3f80146c3f9e0bb3ef3e3a104d1a5330622d95510b3ca9b2f16e1a4613b10304e6c9bc3bdd737b0d304d2dd3825b4151117e930d796652ba843cc1f73096ce111e84d5f1d7a3b2b454586e6ef3f54ac4c914e527633a428049d7d1bcfd5560ae1589a549bf77944a0e713b0cbd8d3b078208ef81145fe6d8406c7f8cf4892cb1e0f0378d05fd6341ba659ebe40672ab703e3f19ff3ac23287888b32b6452f274f9d8baed49326e0b28289b23f1625caac1235ef2e4651868b3b44778d949618985b6dc11c83d8838c244cab8039c78aefa48516d651ef2441f49374cede2a6c3f021432c7dbc1eea5818aec1f80fa02bb94d384b3fcc1aeff8f0110355efff9f59a08fd1e93e9cb315e74afce3c19a1d296fecc5f32e64f65a3ec9d06b045600d34a5adb0c1773fba64ab9e98b4932fb798a82cb3774b1fbd8945e75390508200f5c0e192c77b40d99359df1967f9f03d28123bddf50d38dbae6b503c13e6b84ce318aa667f8499451ccaf679cde9e6f66c1bce39db6d05bb1380a5adabe7ed5d6a9d85057671168ade6cca52c9be2fe204e1025406d0b462e9d30fb70880065901159713d4572cae29696ec0d442d4e1e0542b8338362f3679d58e373411f8c0cd683b49eb8c3924c9ca426aa1c277750ca30b1e78eaba3fb20e1015910d54ce7b3e4a8bffe9bcd34001eed1cb84da761b4b60cab19c58e01399aa9ba5b1a9e459efa91eb449b712f84e54e88fd80f5e128bbbe4746f448c0ab8c3bc63f740452c80c2dc6bf18638c68f87872647844122fcad9b3c108566ae7e1b5a25902ca1018c318a76fb0417b4c9400a19a9049e91c8e4a316fdbdb5c3c8d9313dfacde84e7ee635beb04c2ccf4f6021e156eceb1648395e210ab3b026b13c3199fe2853922fc9a5619c300a8de0c8cb61b10905369b651b7aa2196a56fdefc3bfbad0083f63fe8c9f321609f9d0c23f1bb4cca797639bdab80c5bba2b35393426df342d7c34f0130c7ce7165a3aa1571ae49a294fb579714849104fecc2898b0d6cd0868885735ae4ad066099ade226883c8d930d953d755e2271356e72b82400f2c467f1ca2003e1a24edb69d5c8c0c1605dbc1a490dff704ac4f2577fcbe97ea8706abbe3a84fccf7eb78c8b6490d83eee6f4da336724bb80337acc3b5e65b18276966555c4895d2ac606f19a9d9c54285bc17486302e5c15ea8328c4fe9f0a139eae979ee7788ce22f0c3a6397154adfcd54e70ade191c0e25e0095c56107741542180b3f8fad560c5186bc559e0c4b9b5c0fbbee340f07159b9407544692be3c1fec6283e3c96bb8bacb4360747cdaff8082a7b31f399c80db4654a0cd625d3f1bfb031da0b5f5141687511bef72e1dd590493a6edb700227fa96ffd84d4ef831f4b6d4caffe26ed3feaca71553492d5ee5679ae98a3ba91ff0339964faa69e859eb8a4a901cc7ad09aaecd438c76d5d4a4cc2d4d583a00d8b8b0f81cfce2ca312b245592f98ba96f9ebca9ea7dabe61d8d0dc6f2112a8737ad76e8cbda0ae8bd622314cf571e6853738cbb1d29ea9c0891d1c6207615b60ae9909c36434e0e0ca5a12d94e4780328e2d17dbd8e770961b12a43835be7d16e39b50e2ffb0c9b24e9e5a9d73a0a9236ec7f90e37c57fb82771e3e5f351b5ad76396771f8f80f15ab74d3d496a3bf4990e72807f6e12307253c7bacb553a44714f759d6745328b98368700a0f0b3d5e4cd03c57bee3d02cf17f7f99ffb0603017829b14348f5566167c002dfc067b00cb5db6fcb3a0e57fd78902be035a20bc93afc9c7ac51e19358e59661778cc41a309c0f5d870af73362cf2447f510e2824fbdfd8016a6bab0340d9bc4059d5111722e3525f27e17ce380d0adc6db429be95c514624e7ea8c7ca6128121e6be30f7c15b690f4406988bbaf7509a1d898fadc1f634ef1e1cbf040a5bf1da0228549174cf696cf7a39bca26eebf1d052f4d058062ad672c26e7741d94c2834043d34a36effe0bb3e9f3800f2d4cde82ba4e1cf327de06a50ede81e7dce2b7bc5fe151c90e340373a7dcb2cf4d8d5b95802677c1d3712f7971a0ef09f2af2358376940abb30ca2b2250fe07f315519bcfed9c5fe2959e5e33f81244fcbf0f4656bdb2b6d3d83a217f2bb176d26b343d041b1795d2b2fc8f72dc056c390de5876f13da88d7103d4387506115ff98b59b140da060853dddbfe549122f65ecc4fdeb25f90aa1d8edf3f78414b4c8b4887b05c0d1bbe22cb9f9e202371aa55ab9db93a269a960366a96e053971d430fc1b5d9fce212b6ab053a5d29c27345f906266885a1a5c8f39c155e3e163c027a95a1413011d426cdc664fc1e4c6ee7c71b898ae9edbb22a4d1b0312447471d496d3bdd77b80c11fabc8169c9755b323eca3ecfb1dc199be34f7f141076063bdfd68cd626acae26534774171b48263fcd261d3a8b919594f810f9682d362095d75fb1b39959305a9d307bf5d49f9c629188f244f35c6359f1cd64deec1f8428e2b260fb0334ec1d44d0323095d62649a602d8fc4eacffbedaa8ddb2790241e7e6c2382cb727d2e2ae84916c40d3c98609a8c1d9725a719ddcfbc090113a91aeffec755e1b3c7ca5b50d7d485e9a91b4f6b18ef7068b2f71dedf59de61d9c11c635e14fb5036187227e2bb7773ac7cb3a5874e7af42c7f2214330f31918b91988def1608ebd55fa2490a43cf0e7324d7c67f32f353a340094cc0447cca565a78c434cfb3497eb2d085f24f59f8efa8702f68d81eecf4cdc2a2effdeaf28424d13ce0a2d6ca8dfc7de9d4304a04501cc6587ff8121f3df8a4bc22c2aed3beb611309e79110ae397bf6a6bd368df6e0f6dbd0c64eee73dc82f3a586f1a2ed591712f7ab49725c28ee0395c1d51c70b9c52545d785e1020c4cf5e7c0bb0fbc2cbfe1f605ada64caca36d0d23ff8c06aa16bda1b45afc1c1e203acdaa6e26a47c6dfd7a577ae75d23c073b3b2fb9a3563751bd45433210d20f54dfd68da8fad46dfde933b5aa0e9b5ee16d6e5135e3cd12ce02ebce27d6d90d28af6b690bd989ac1469409b5b1a55b1bc00d4195944c0f17e5d8ada3b02f57638903c01c7e4c23bd8604285f2c40e856cc245a246b3e5fbb432a0c8721cf2dee93a1bd3a3f01532b832e541d501ffaa79c7dc4d26ac66ca1ed7624928786f56ef19fe336f614152975bf9c12823f464c66b201ee0fa42a57e2cba2963ffc6063b901a9cf7af278c59dbf8e9dca6f34fc3ecbbc238908907d03b6d4a65733f5d712fb9702dc8ce467c28e0349e0bbe461717d39326f8210199253c9ae56bf95ec247ca3b6d2ee1ff78cb8bcedf08f11c803328cf7b8106aa5868caea6b0ad82b2ed49f1a1bd8287e1a031e414666fdf054241207227e201d14ffc13004560d59388a4b20cb3825b5f8903b18854fa9bbbbad41d8aadea30fb6bd2b1a0eb58cf28eb8c1652a94d66ef06ad3e8f6787e9b2b450d855f6275773289ef398b7df37f644c1c24041f75015f12479c19a8356406ccf593474f6cc9d73f805f35018021bfacd60edeb13efe570eee6b34fdd7129ff95cce42e3851819168dec14cb63fdb086af9ce93654ba6ab3fc6e72e2b2968c2ee07494e75898bcc1b417d6d074b5f1b2e9a6b4bdb45b43b0de4414f36fbc47466003747ee4949ffc21f354dc0463033ad98267e5af3332379f4ea4c902b8c82e1a321bdc3e4fbd852f79b61cd02157d8a343fd511378d9d21c61102d99b8658af1f1e126757bd2787c7d51672bcd4ed02fc202e54a1f3d74599c94ce20442a0aca43e136d9908f14d5ead94731ac6895532342f2a582e75b35d98fe0f2932ecae77a0881cc272c36ad05f9c887d27b02d3b57f33cf7360653f994727dbd4edd29e5208d23243044be06e73f2b65e147236016dd1fb813318dbdb7a8ab33d2293c530529fa2bc5ce2e92a6d2a740fa2dcfb23b2051f5d795b9c7fb12250d0c0f629f650ce3209ed0a7b6f8b65c19bd1a8018364aa1910caa1038918d57bed7dcd000f521a87d332a6fa06bc83495fd6457ad064b5d17bf099bd49164840cacf2459b97ca98a2d60ed61034d6ad03e49e3ca12e24269972ab56f0c20aa6b940d139adbd38759e3b3471d81d54f8b0be81efa1fb9b06df1a4b3ad1b8810ad42e4226456bb24e6e345790e3f078d2de38bf4453772c335525b1ae3b5f3ca63b1e09165cfa5489cfeeab145a0e4680c2067cde4025231ffe62b4a77f46cf7b9dbf68d09f634a051e372229544f05580145e38f3698a2d872bd3406366bd1cae710b554ae0df11e0b13e5e33ea90067d41f5e3f8f0c5290d93272fcadfa2ebc59f55af625a86287c51e7689427fda4a2b51cdc1b2d16c5d0921c35a69417c1c9c767c63b49d3d074f1504a00398b99f73b9a54dcdfc19019dfe120122e049395e9593213bcb3eaceea927d86d1147a46f1517ec043f0d163f4e05d5bd4e5ff015c6c29575ff93bdb2559decd45dc94605c47f6b94f9988e29d94918b3175450cd35149226e9e9e440cedc5a601f78c74b17dbda4cb3b6a57181be4c8b3080a46f512a6276113b112f3d78b9499d1c4ebbb8a83d46320b8c076d0071256ce7d2172aa59bfc629c8acd25fa7c7c85b97c407ac26500cdb7ec08e57ccbe2a12119aaa1f287cd59f63be163fa92a3cadefc816075f798cd28594c70d7438c2cb8299ab0bdd5d0171915039c9d535c4a829be40a22865e28e559cddb72701dc4ed9799087ba2f23ff4809d5ddfda31987cd1fdd3a9ec8a91acf52a80a2c257ac33ed619ce5f842f7e634c76c1ca4a7f5978a338c65556c6c1d24747452efd37f4654a06e77a75111122db51ff5ccce739a69bd2046dacbc0a124ba5c75d67e51a5882dd2a47060b6a215b15438e9847b5bea5e218cc1987246f1a34a6ab0fbd4a385743d5d6772174c698b7057ce8151ed8488fd9dcb809a37d493ca84697b4443d58f9ce255fa8ea799c74bded89e8a55a880990a579787696b951860cc24fd909daa92a107c0b30c1610508660bc6b83ff4259f6560ef98d5b61a31235e1d0611a1a9a76c2f1fd56f837f7953141d2ad7a30079f0dfaf3371787c8340c9a2bb6105b4ceac1f9a82e0390e004d6bf131cfeed8c87b24b9518674dd1540636136353f2a33847ea7bafa8191073d16b680417fccfcc7504a588cf774a58caaec6b1f18f8e828afdcef3e242fb0d956fbdc971a67e302a88bd7e2b4f786a5f1e3a8036e039940b7808d7f049cefc896f27f12931c310727c79c84003d3556bd9ddb4aa7fe152c89cd71f359adb22d7d23379029a8c2961968f2d8bb78146151cd151f35b4b8313cb1447fa2a21b768b7449a49a9fef8774f830cd173006"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000380)={0x71, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c13f78aae46a0"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002200)={0x0, r9, "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", "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"})
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:33 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x700000000000000, &(0x7f0000000180))

09:43:33 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xff07, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:33 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f001000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2305.682632][T23452] loop3: detected capacity change from 0 to 4
[ 2305.689642][    C1] sd 0:0:1:0: [sg0] tag#7752 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2305.689700][T23449] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2305.700062][    C1] sd 0:0:1:0: [sg0] tag#7752 CDB: opcode=0xe5 (vendor)
[ 2305.708389][T23449] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2305.715238][    C1] sd 0:0:1:0: [sg0] tag#7752 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2305.735790][    C1] sd 0:0:1:0: [sg0] tag#7752 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2305.745376][    C1] sd 0:0:1:0: [sg0] tag#7752 CDB[20]: ba
[ 2305.746492][T23452] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2305.762478][    C0] sd 0:0:1:0: [sg0] tag#7753 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2305.763409][T23452] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:33 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x104000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:33 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
r1 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000100)="6b23460bea793a3242c0b360837677fe034a38adc75b5c8cf914edace9", 0x1d}, {&(0x7f0000000140)="e5bfbf7f2c923691cf8d6e4850b580cc798ed6a2af86dd55bea4b34c042dd3f15aa2586aaa8f518894bcbb121e13468b5c067275d9c5bf30d0bef24b11bc3eec2a3d6fb6eee3cf7bf889cb09c22d281b16c4f6c8f6b83fbbe04ee64863695a37225ab2fcb4304ced59506510d2aa2c394cc8038ef9af7f4030b6da07585e7f318bf13aad0475984abd81a4b38e37566dd272db08dfb80d53dc4d8ed0232d2dba69f1509a26e4d6227ea9ced93758228d62e70c7fb565c18117bc14f71d5af501908f5b1f36f4bdeac37b9d18ccdf72a83a58da7fecc0ed152681b0d624", 0xdd, 0x7}, {&(0x7f0000000380)="c09ccc70a68a0df021a5e07b27b302e9861b8ae11a89faa2eec20aa736c88879557ecb98bb1d9862e766bfa695eddcaff042a539973c672333963dc50e42f344c81d9eed7f667079b413c17a72472d1751dc4d17db2c58a95a1ba6d0365a80447d39881b46556b84c75fd62c546f0d7a7d9fb4648bd6d55efb23a2433e8d0fd61c8b07436b05c52a4ceb3e6b060a4d60d284b192b7906c6c5e1aa540ab54a157fadf67511fea4748c9456f01fbe97bc13ea0395b1c4c42dd885a43a627299e4da72db584f063", 0xc6, 0x3}, {&(0x7f0000000480)="0325b6d21a8321f53d7a42d86618212d7ff5cf49ebf319f72aa06074696df7bd173020da53765c3172da75a44f37ab949c82466aec05c7ec2e82b623b4766cc18afa55d4f7f823b326763efe7e7c9891ed6856d8e88355f380f562e4619a14eb5ed1ab308e8cf6a3ae82149b8c9efcfa6f5799663edb6202c3421db1ee6dfa78f6fe49abe0c6360beb89b7859e8cfcadb408e077d453c416de7791572276035c306e6df067bb58a4268e26f4913dbceb13ef3a0cb33183f1fa1e26137cf01bd1152fbe5dfae1c5e81f51ca5820dd990e5f75f7f0240d464f72a38b80a5a502461ec97b1c", 0xe4, 0x20000000000000}, {&(0x7f0000000240)="31993e6aa069a40d", 0x8, 0xffffffffffff8001}], 0x10, &(0x7f0000000580)={[{@fat=@dos1xfloppy}, {@nodots}, {@dots}], [{@euid_lt={'euid<', 0xee01}}]})
openat(r1, &(0x7f00000005c0)='./file0\x00', 0x1, 0x41)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2305.772874][    C0] sd 0:0:1:0: [sg0] tag#7753 CDB: opcode=0xe5 (vendor)
[ 2305.772894][    C0] sd 0:0:1:0: [sg0] tag#7753 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2305.772928][    C0] sd 0:0:1:0: [sg0] tag#7753 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2305.772943][    C0] sd 0:0:1:0: [sg0] tag#7753 CDB[20]: ba
[ 2305.778933][T23449] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2305.822074][T23449] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:33 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x702000000000000, &(0x7f0000000180))

09:43:33 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x9a5b9000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x450000, 0x0)
clone3(&(0x7f0000000600)={0x304000000, &(0x7f0000000100)=<r3=>0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x7}, &(0x7f0000000400)=""/229, 0xe5, &(0x7f0000000500)=""/234, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r2}}, 0x58)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r2, r4, 0x0)
r5 = accept$inet6(r2, &(0x7f0000000680), &(0x7f00000006c0)=0x1c)
fcntl$getownex(r0, 0x10, &(0x7f0000000700)={0x0, <r6=>0x0})
fcntl$setown(r5, 0x8, r6)
mmap(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x100000b, 0x100010, r2, 0xa07fe000)
fsetxattr$security_evm(r1, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="059308000001ff0077563d88758db338d2a9c7c2e07cb1edc8c0591e52bc5041fe5ec459f8dbfb02612c598106dd1a9b4fe13b76c6d33d3be872a81cfda76675dc5cc66247b4a4d4558c7a96fcb8da3486094ce51d09585eee8549a4d75e70102fc6c771a708b9455228adf4b4e77af50e1f0c2a549a9801f8b3bfb008330af7d25e99b0bf"], 0x80, 0x1)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r7, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2305.867432][T23452] loop3: detected capacity change from 0 to 4
[ 2305.883200][T23452] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2305.902751][T23474] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2305.911134][T23474] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2305.915018][T23452] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2305.940901][    C1] sd 0:0:1:0: [sg0] tag#7754 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2305.951284][    C1] sd 0:0:1:0: [sg0] tag#7754 CDB: opcode=0xe5 (vendor)
[ 2305.958140][    C1] sd 0:0:1:0: [sg0] tag#7754 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
09:43:33 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1b2ae8, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:33 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x800000000000000, &(0x7f0000000180))

[ 2305.958730][T23486] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2305.967715][    C1] sd 0:0:1:0: [sg0] tag#7754 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2305.976043][T23486] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2305.985566][    C1] sd 0:0:1:0: [sg0] tag#7754 CDB[20]: ba
09:43:33 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e100000000100000000b000000001d00"})

09:43:34 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e100000000100000000b000000001d00"})

09:43:34 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f001100000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:34 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:34 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000edb9)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x4000000000edb9)
renameat(r2, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00')
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:34 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x900000000000000, &(0x7f0000000180))

09:43:34 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xa00000000000000, &(0x7f0000000180))

[ 2306.622555][T23522] loop3: detected capacity change from 0 to 4
[ 2306.635497][T23524] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2306.643932][T23524] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2306.651928][T23522] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2306.664427][T23522] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2306.675121][T23524] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2306.683555][T23524] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2306.700074][T23522] loop3: detected capacity change from 0 to 4
[ 2306.713723][T23522] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:34 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400001, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:34 executing program 5:
r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @scatter={0x5, 0x0, &(0x7f0000005200)=[{&(0x7f0000001fc0)=""/6, 0x6}, {&(0x7f0000004ec0)=""/174, 0xae}, {&(0x7f0000004f80)=""/240, 0xf0}, {&(0x7f0000005080)=""/181, 0xb5}, {&(0x7f0000005140)=""/176, 0xb0}]}, 0x0, 0x0, 0x0, 0x10005, 0x0, 0x0})
preadv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/164, 0xa4}], 0x1, 0xc927, 0xffffff48)
signalfd(0xffffffffffffffff, &(0x7f0000000700)={[0xf5fc]}, 0x8)
r2 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
clock_gettime(0x0, &(0x7f0000004e40)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/122, 0x7a}], 0x1, &(0x7f0000000800)=""/234, 0xea}, 0x87}, {{&(0x7f0000000900)=@qipcrtr, 0x80, &(0x7f0000001f00)=[{&(0x7f0000005280)=""/4102, 0x1006}, {&(0x7f0000001980)=""/213, 0xd5}, {&(0x7f0000001a80)=""/213, 0xd5}, {0xfffffffffffffffe}, {&(0x7f0000001b80)=""/120, 0x78}, {&(0x7f0000001c00)=""/56, 0x38}, {&(0x7f0000001c40)=""/172, 0xac}, {&(0x7f0000001d00)=""/216, 0xd8}, {&(0x7f0000001e00)=""/220, 0xdc}], 0x9, &(0x7f0000001fc0)}, 0x7}, {{&(0x7f0000002000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000002080)=""/10, 0xa}, {&(0x7f00000020c0)=""/8, 0x8}], 0x2}, 0x20}, {{&(0x7f0000002200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002280)=""/101, 0x65}, {&(0x7f0000002300)=""/140, 0x8c}, {&(0x7f00000023c0)=""/132, 0x84}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x4, &(0x7f0000003480)=""/123, 0x7b}, 0x92}, {{&(0x7f0000003500)=@nl=@unspec, 0x80, &(0x7f0000003780)=[{&(0x7f0000003580)=""/196, 0xc4}, {&(0x7f0000003680)=""/21, 0x15}, {&(0x7f00000036c0)=""/182, 0xb6}], 0x3, &(0x7f00000037c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000047c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004840)=""/75, 0x4b}], 0x1, &(0x7f0000004900)=""/48, 0x30}, 0x9}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000004940)=""/237, 0xed}, {&(0x7f0000004a40)=""/240, 0xf0}, {&(0x7f0000004b40)=""/102, 0x66}, {&(0x7f0000004bc0)=""/121, 0x79}, {&(0x7f0000000980)=""/185, 0xb9}], 0x5}, 0xbd}], 0x7, 0x3100, &(0x7f0000004e80)={r3, r4+10000000})
vmsplice(r2, &(0x7f0000000680)=[{&(0x7f00000001c0)="47b94e8564ef0149c5bac76b5f69e7f54892965ad301c025b2cdca1ba4afa48aa6cfceb5c7dc14a667572027cd437cf865b9b7efb66812eeac9d0ba5872ed3e0363df00d023a574e07668766fe5efbab24aca81f57eafe25ccd2e19ab9b10632009d65dc99df833b0d64743373a3b4ba22ed9c93208bb0b479ea659f4780d6a343d696136f06982303537e2cc44e9180c5627bb4b209ee6805924e", 0x9b}, {&(0x7f0000000380)="71ad095eb99b6ed3629e8abfe89c4ed4305cdac4a8ec9cf25eae5c74224837330cca658c6b17845b20d849498e9d42d3e4d690ec8267fdbf324294bb84716044c23cc099563edef03e602fd9d46b0e3973a6865d70f749bfb0ad1594fa2ca9216aa82ca1fbe56adc9faa0e3ac49e8cb23b94ffbf7d522b9cb3d1637db65ef821467d78b5bd7738e5c4e34edf0e170ea35dbfd52b9286666ce07ab9428c65f0173730200857058ee6d165cee17c17e6a028ee00c551d0", 0xb6}, {&(0x7f0000000440)="546afafd0255505a96479b28d7602f1895b95218ec6eaad416c0595f5ee71224bdd17073d704fd99a4a1f2f047ae20c02f58025c98d0d70cae2d4c120b15184fcc47b67ef82da6abd0208aa90e79ee12db4a68209b2b88adec8d26c8b7d493c0e57ccc81872c5d798b7111bca6f596fc8f8a55e8d4f251694fb6fc24e5b96d75a9652d05a5bdf7a01bab5cbc43a305169a899482aa7bcc593456ccc7b512beb02a7783213f7196701c3ef05b94b97cb1502bc8f28fa404c54fc7fb52edce3363ce2e69202914312e0dd738213343c6f4526f1e47f73a09f49d5e06c8dce12c9b7d1b8a17f92772302806e726bb90175b48dc", 0xf2}, {&(0x7f0000000540)="63414e9b69cf0326ff6a353674579b1695d43b70a84e4bb5c0d28ab80f31655c6c3d46a229def6fbd92054ca63836dbc9b12347ae58e0e273afcb88c14f198401a81f5ff5e58e1a6afc10e6dcd63a8e3c7a3b743eb1e5a15456c665633cf1c7c562851d07dc9aa01f87713dfae2b03da4d31baae8af202629757cfce49f1fff52be0189c790ea4dc31a54b767af0f52f55c9", 0x92}, {&(0x7f0000000280)="4c1093eb519079fde45ac9f34f78657e26116e4d916d1c2cd7938161ec7a629210673688745d", 0x26}, {&(0x7f0000000600)="207014a2f34ae0e6dcf887172b0ec44e1129c2b1cf2bdc3313d648ee0bad17bd0663fdf907bff95a9f1ef27509890ef38fa73cfc46b537b544a7cd208dcb56f0f526339a18b68577df707b40c570ddd76693b4cde97a3d65b46d029e154371", 0x5f}, {&(0x7f00000002c0)="c9d0683b3026a1765273a3ee35c5905d7db2bbbf58e6552fe19e04a2a9719b7c60f9d20aa5771475", 0x28}], 0x7, 0xc)
r5 = pidfd_getfd(r1, r1, 0x0)
openat(r5, &(0x7f0000000080)='./file0\x00', 0x400000, 0x27)

[ 2306.727435][T23522] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2306.752205][T23543] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2306.760599][T23543] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:34 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xb00000000000000, &(0x7f0000000180))

09:43:34 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x10)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x18000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f00000cd000/0x4000)=nil, 0x4000, 0x800008, 0x12, r1, 0xc42fa000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000240)={0x1000, 0x8000, 0x40, 0x6, 0x15, "22a559db78ce70d9"})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x4000000000edb9)
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x4, 0x9, 0x6, 0x8, 0x8b, "62175b0a10415fc48ab76284d65ad118505d4a", 0x3ff, 0x3ff})

09:43:34 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f001200000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2306.787212][T23543] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2306.795681][T23543] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2306.853799][T23560] loop3: detected capacity change from 0 to 4
[ 2306.862601][T23560] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2306.872377][T23560] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2306.919425][T23560] loop3: detected capacity change from 0 to 4
[ 2306.925991][T23560] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2306.935883][T23560] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:34 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e100000000100000000b000000001d00"})

09:43:35 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e100000000100000000b000000001d00"})

09:43:35 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x401000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:35 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x12}, 0x4}], 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x1, 0x20, 0x4, 0x0, 0x6, 0x9004, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x7}, 0x9010, 0x0, 0x1, 0x7, 0x1, 0x5c2, 0x1, 0x0, 0x8977, 0x0, 0x800}, 0xffffffffffffffff, 0x0, r1, 0x8)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:35 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xc00000000000000, &(0x7f0000000180))

09:43:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f002200000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2307.485811][T23591] loop3: detected capacity change from 0 to 4
[ 2307.495801][T23591] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2307.509556][T23598] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2307.513762][T23591] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:35 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xd00000000000000, &(0x7f0000000180))

[ 2307.517940][T23598] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2307.551069][T23591] loop3: detected capacity change from 0 to 4
[ 2307.568281][T23591] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:35 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xe00000000000000, &(0x7f0000000180))

09:43:35 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x100000000, 0x2}}, 0x0, 0x0, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x32e7d, 0x0, 0x0, 0x1}, 0x5)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2307.578395][T23591] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2307.579641][T23598] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2307.596099][T23598] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:35 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4af000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f002500000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:35 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=<r2=>0x0)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r3, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x7, 0xff, 0x1, 0x3, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x4, 0x8, 0xff0000, 0x9, 0x1, 0x8001, 0x2, 0x0, 0x4, 0x0, 0x7}, r2, 0xd, r3, 0x7)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
kcmp(r2, r2, 0x6, r4, r0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2307.672465][T23622] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2307.680905][T23622] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2307.688692][T23625] loop3: detected capacity change from 0 to 4
[ 2307.700376][T23625] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2307.709905][T23625] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2307.743807][    C1] sd 0:0:1:0: [sg0] tag#7755 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2307.754183][    C1] sd 0:0:1:0: [sg0] tag#7755 CDB: opcode=0xe5 (vendor)
[ 2307.761046][    C1] sd 0:0:1:0: [sg0] tag#7755 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2307.770612][    C1] sd 0:0:1:0: [sg0] tag#7755 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2307.780181][    C1] sd 0:0:1:0: [sg0] tag#7755 CDB[20]: ba
[ 2307.800854][    C0] sd 0:0:1:0: [sg0] tag#7756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2307.811321][    C0] sd 0:0:1:0: [sg0] tag#7756 CDB: opcode=0xe5 (vendor)
[ 2307.818147][    C0] sd 0:0:1:0: [sg0] tag#7756 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2307.827709][    C0] sd 0:0:1:0: [sg0] tag#7756 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2307.837273][    C0] sd 0:0:1:0: [sg0] tag#7756 CDB[20]: ba
[ 2307.848613][T23625] loop3: detected capacity change from 0 to 4
[ 2307.856223][T23625] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2307.866603][T23625] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:35 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e100000000100000000b000000001d00"})

09:43:35 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e100000000100000000b000000001d00"})

09:43:35 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4fc000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:35 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xf00000000000000, &(0x7f0000000180))

09:43:35 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x98220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x4000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f002e00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2308.384798][T23661] loop3: detected capacity change from 0 to 4
[ 2308.400885][T23661] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2308.402006][T23662] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2308.418460][T23662] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:36 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:36 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1000000000000000, &(0x7f0000000180))

[ 2308.420340][T23661] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:36 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1100000000000000, &(0x7f0000000180))

09:43:36 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x540000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2308.469324][T23662] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2308.477766][T23662] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2308.491769][T23661] loop3: detected capacity change from 0 to 4
[ 2308.501844][T23661] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:36 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4c, 0x3f, 0x7, 0x81, 0x0, 0x3f, 0x62004, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext={0x1, 0x9}, 0x20, 0xa7, 0x8, 0x4, 0x7, 0xfffffff9, 0x3, 0x0, 0x10000, 0x0, 0x8000}, 0xffffffffffffffff, 0xe, r0, 0x1)
r2 = syz_io_uring_complete(0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x3, 0x4a2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f0000000080), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x11, 0x41, 0x1, 'veth0_to_team\x00', 'batadv0\x00', 'erspan0\x00', 'ip6erspan0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @dev, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xd6, 0x106, 0x136, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x80000000, 0x0, 0x9, 0x1}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0xd0, 0x1}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x73a0}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x9, 0x10, 0x8863, 'veth0_to_batadv\x00', 'netpci0\x00', 'ip_vti0\x00', 'vlan0\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0xff], @random="6398ef6218b4", [0xff, 0xff, 0xff, 0xff], 0xde, 0xde, 0x10e, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x0, 0x9, 0x6, 0x1}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x9, 0xdf, 0x401, {0x800}}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}, {0x3, 0x1, 0x16, 'netpci0\x00', 'bond0\x00', 'ip6tnl0\x00', 'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0x7f, 0xff], @multicast, [0xff, 0x0, 0x7f, 0xff, 0xff], 0xde, 0x186, 0x1ce, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0x7, 0x9, 0x3, {0x5d}}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x4, 0x1}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0xfff7, 0x1, 0x0, 0x0, "693cb95868952719b1d356d14e2ec9ff459347e44c099b9204adcc4032d0228dbc24bfe97e9146f36661167ca90a1f4371778e902afe51a5fa76b5346f9846f5"}}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x80, 0x81, {0x13d}}}}}]}]}, 0x51a)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2308.546143][T23661] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2308.562122][T23695] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2308.570545][T23695] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:36 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x550000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2308.588664][T23695] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2308.597090][T23695] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2308.640153][T23705] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2308.648560][T23705] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2308.675379][T23705] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2308.683755][T23705] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:36 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000011d00"})

09:43:36 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000011d00"})

09:43:36 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1200000000000000, &(0x7f0000000180))

09:43:36 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f004800000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:36 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x570000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f004c00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2309.253940][T23726] loop3: detected capacity change from 0 to 4
[ 2309.266759][T23726] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2309.277390][T23730] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2309.281402][T23726] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:37 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2000000000000000, &(0x7f0000000180))

09:43:37 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3f}}, r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
vmsplice(r1, &(0x7f0000001380)=[{&(0x7f0000000080)="ce6a20713a1be7d3a035807426b58b3b80b44f0415ca46344dedeb63963bcdea292ae401", 0x24}, {&(0x7f00000000c0)="903fbe597b0f10616ab936289d05ee", 0xf}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000100)="5544b0a0b87c30ae4675c9efb9437de1ae741f95fda0116b92c936aae0d45456e4fd6d7c1d1ecdc243f9b0a3557e1fe896bacc6c015a9b80e2ffca47dea30b37c529e485f51f0931153db26dc8b972b4b39c61df20602844abc7d7cfed7eb80bca013ae14eacc864d024ac", 0x6b}, {&(0x7f0000000180)="0e648dc41ac5e9363bf55a61d1a34e47f1053dbf57f8c059d83a0f92698fd2dfbb67cbf8ed70c515a4ea5a58b2beaff5a7", 0x31}, {&(0x7f00000001c0)="1caa57222e303bb750656dfc4fa08ebb6481162e33b6b9c96503d7f978c48354295561253c30dd4712efa4614d8f9cd94e0cd358c1eac2df51e7d97d5b0fb9de7758dbfa62b899ff6e81e7491a752ba79fdda38b492dec3a9d2696fe786cd59f9f81aee901598aad5008a79e674c9aafdbaa20d385505d18a5a279695ea574ba41c3d513f13825f3e3f470efc23bb616be719896a7c567069aed5ae802304b7b9780bcb0c3e9986dad9759d623a470d390ff36f6261a59b42c9622af309c24aa5a6091ef35eb28c7b3227e86cd74c90e79c4071c270c8627a87c833fed718a0a25402397217e50", 0xe7}, {&(0x7f0000002200)="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", 0x1000}], 0x7, 0x2)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2309.285804][T23730] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2309.321825][T23730] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2309.328764][T23738] loop3: detected capacity change from 0 to 4
[ 2309.330217][T23730] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:37 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x70da01, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:37 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffb, 0x9c, 0x3, @buffer={0x0, 0xfe, &(0x7f0000000080)=""/254}, &(0x7f0000000180)="e0386b067941e7467216f9837022832b5093881917f975dd1fe84692a12d29e2d010b31d8360c5e703f0b8db4893a349d05bfa903752dd7ec6bfc042357713271495c9bcf2601bf4e267aa1af4a961d18c0cf9d08e630ed1a767b9915bb3bd5c13fa18cf0208ea10f2f3d34111c9cb53eb627847d441f42396bb61565b3146e61cfc370f008c273def8fe6dfe9f8cd32dd046325f702be69efbe8d3b", &(0x7f0000000240)=""/166, 0xfffffffa, 0x11, 0x0, &(0x7f0000000380)})

[ 2309.403332][T23750] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2309.411811][T23750] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2309.415975][T23738] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2309.432822][T23738] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2309.445182][T23750] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:37 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2010000000000000, &(0x7f0000000180))

[ 2309.453634][T23750] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2309.481056][T23738] loop3: detected capacity change from 0 to 4
[ 2309.487578][T23738] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2309.517484][T23738] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:37 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008fffffdfd1d00"})

09:43:37 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008fffffdfd1d00"})

09:43:37 executing program 5:
write$sndseq(0xffffffffffffffff, &(0x7f0000000840)=[{0x7, 0x67, 0x9, 0x17, @time={0xffff, 0x101}, {0x2}, {0x4, 0x7f}, @raw32={[0x80000000, 0xef5b7980]}}, {0x1f, 0x80, 0x9, 0xfc, @time={0x1, 0x7}, {0x1, 0x7}, {0x7f, 0xac}, @raw32={[0xb96f, 0x7, 0xe344]}}, {0x8, 0x7f, 0x3, 0x81, @tick=0xbd, {0x2, 0xff}, {0x0, 0x4}, @quote={{0x81, 0xff}, 0x9, &(0x7f0000000800)={0x2, 0xf1, 0x1, 0xb, @tick=0x2, {0x3, 0x2d}, {0x81, 0x6}, @addr={0x6f, 0x8}}}}, {0x7, 0x81, 0x4, 0x40, @tick=0x9, {0x7f, 0x1f}, {0x3, 0x4e}, @control={0x20, 0x7fff, 0x5}}, {0xf9, 0x1f, 0x1, 0x61, @time={0x6, 0x200}, {0x7, 0x7a}, {0x50}, @queue={0x1, {0x7f, 0x3f}}}, {0x5, 0x3, 0x1, 0xff, @tick=0x7fffffff, {0xd9, 0x57}, {0x2, 0x3a}, @time=@tick=0x1}], 0xa8)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x10a52}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000000c0), 0xfffffffffffffffd, 0x240000)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x80, 0x67, 0x87, 0x7, 0x0, 0x0, 0x8040, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbd, 0x2, @perf_bp={&(0x7f0000000900), 0x1}, 0xc01, 0x1, 0x800, 0x2, 0x10000, 0x3, 0x2, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xc, r0, 0x1)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000780)={0x0, 0xfffffffffffffffe, 0xeb, 0x1, @scatter={0x6, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000380)=""/134, 0x86}, {&(0x7f0000000440)=""/246, 0xf6}]}, &(0x7f0000000540)="72bc1c72b8b4ed0f25e183ab701e3d77b11febe122a5af287d084b3356259b86215c417f043752dc052d40c30978dc981ea59cfa34463df03109299ea13f5b92cb2ff440c49746f57a1344cdab814743ee5ee170f37302dbc694dd9f3c160bdf93b31245c59256758e13b50986a23807326b408bb38a70e9d7cd615c81f22fd8fc2985618f1e2828b2c1da3e9223329e2f6040ed9c2dcd0034dd31ea5c1e1233adf72b1a9cf7104441c9aeb0eaf3a2e5f6804fea22fa48240c2292b96d1d2b9c3432f3a9c29bd97232b7ffc9e05a10b33f8989ec9bceba929f0fd03b8dbaf8480e840cfd9ab04944604d94", &(0x7f0000000640)=""/254, 0x7f, 0x12, 0x3, &(0x7f0000000740)})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x4000000000edb9)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f00000009c0)='./file0\x00', 0x2, 0x0, 0x12345}, 0x100)

09:43:37 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2200000000000000, &(0x7f0000000180))

09:43:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f006000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:37 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x970000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2310.116700][T23786] loop3: detected capacity change from 0 to 4
[ 2310.131557][T23786] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2310.140881][T23786] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2310.141946][T23787] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2310.155000][    C1] sd 0:0:1:0: [sg0] tag#7757 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2310.158647][T23787] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2310.168980][    C1] sd 0:0:1:0: [sg0] tag#7757 CDB: opcode=0xe5 (vendor)
[ 2310.186825][    C1] sd 0:0:1:0: [sg0] tag#7757 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2310.196416][    C1] sd 0:0:1:0: [sg0] tag#7757 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2310.205967][    C1] sd 0:0:1:0: [sg0] tag#7757 CDB[20]: ba
09:43:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f006800000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:37 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2500000000000000, &(0x7f0000000180))

[ 2310.218345][T23787] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2310.226767][T23787] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2310.270734][    C1] sd 0:0:1:0: [sg0] tag#7758 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2310.281143][    C1] sd 0:0:1:0: [sg0] tag#7758 CDB: opcode=0xe5 (vendor)
[ 2310.287999][    C1] sd 0:0:1:0: [sg0] tag#7758 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2310.295183][T23810] loop3: detected capacity change from 0 to 4
[ 2310.297578][    C1] sd 0:0:1:0: [sg0] tag#7758 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2310.313270][    C1] sd 0:0:1:0: [sg0] tag#7758 CDB[20]: ba
09:43:37 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc04f00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2310.315846][T23810] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2310.329455][T23810] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2310.351950][T23815] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2310.360411][T23815] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:38 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x3f00000000000000, &(0x7f0000000180))

09:43:38 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
io_submit(0x0, 0x8, &(0x7f0000001780)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x25c0, r2, &(0x7f0000000240)="7bd259affb4736a0a6", 0x9, 0x9, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x3ff, r1, &(0x7f0000000380)="8236fd4cd12fba752fde74b8993c39fe5a8d", 0x12, 0x100000001, 0x0, 0x0, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000400)="014e80d2c56ec43cbfeb6a0f16d54900fd8d828d5ee69adc9f258c4746e40aca6804bc6f297af820b6891b09fe687b01a8741c4f23", 0x35, 0x9, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0xfff8, 0xffffffffffffffff, &(0x7f0000000500)="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", 0x1000, 0x62, 0x0, 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0xe2b, r1, &(0x7f0000001540)="548c20b908a95bcc807fea9b297656cad02722d9531b08b5d578c2bad40087ad0f962e7b78328b7062c34fae21093111953c7215abf79b3680afecb0826121f894cc2af6fdce792b4528ed8d5ca25ff43f1c8ccd88cf243aadb7931c673961d9fe0d4852dbf544b61192ac63f2f4a7198edd877bcd4b7d6b727b54f8f244ed087b94d02fd0e554b592769733c5b7a12a3974b0fa228baac0783938d794ea2bcd5d8fbc94", 0xa4, 0x2, 0x0, 0x3}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000002200)="bfb573f3324091117b25ca18070dadcc66b6350e725dfd43f6c4884a96f864d3d5e5aafe1b5dac191c035f860c48cccdbf56578c5109ce4872beb510142d86de2b03ee0c926ad950425d47a4e3ed9c05a29775b365df1e68e88ee531950b93dc4887f9d022be01a4c740b5633fabfa1ff51c1871535d77157a5a3939c9662b1bb8adc3d697a6fd5e41ffe8615ade0dc5ea72c555846f125bd43d949bf02ac0f9e8b25464dccf05b1ece904739539031af4a4601cd999ffc0012f4c994a79f12fb6e1e499e5d1341e147c0dcef6ab8a09508084a5bd5e4e61b775cc388799fab883e3762595ca3dde7f6449aec7d143da6a44056a48533c840fef02d97277393a29e4a133444325f53efc2b9a4a0c78c49d3a44c32910b5da4b6660f9e418f673e9232d0d77b7483762c520343c48e4117b74a0bd920b9a380590c5c0037a7a207481343e94b2e6bb7928079a5ecebac1416f6d64668d52bf5261be642bb2a2cc57891d03ea9e705875f3d25c49c3621cbff305a0d3710163d7b7a4c30ed0990045a8fb1bba4df48524bb9d1482eb8416537ba7d19d4b628d28689f3b6e757b537fd5d80a4968ef49e669b7569c79f93f74f1c681568db6ae4c3fe5633ef65781e99d2a286cb032efa0a7279c425d361952f1e768cc7f6bb493a924e4a427517ae27ac62be00097459dc2c59081bd46e76c2f8918721daf051cd1ad5b79a13826a6455bf8be50cc8f932d635eafcd1f791ab5b3e069674ebe67c8189a24088e547346f1501b97845de6a87aed7596565d1f9dfa5b7717d4f98144221ac5cc0110a39b47a90aad4ca100e4ba13bea196803f4b1e940c55819313a7334410469a7a77b462a0a4f79ecee41d7ac572d87e09828c989060e7e2671dfe3e6854ae9638016af220fe808b1d66373eb10cda9d58569c354c2489966744daccb24208caaf1a4287393c779ba5eb6f0d82280a7b1deaf4893ee967d0d8d7cb9a4c622f5641c66dc2e94058317def01a2240f39154c9e010f7e85e4c5ac4ad9e1f1036e79efc616c77f0fcadeacb37b0a7ec2b2ed3beda7cf4b9bf25b6c83325db5ba41b62f99c09366e777cf9cef204543957cbc2dcb07613491bd10cdbfdfc7add7a1fdd65aff4f98b19d85633b74970e46ae12ded5f8ebafaf6af83cd2b2e101866f4eda4195c38f25b4f5535dcaf2e9eb08a76b54a9058ffc46315b9003be2c8af8dcc065e17e62d7314abf903e427d51890a37b4bb788cb059d2ea3545165ede684c682cb09a0f48a91f442d3d327ab138bf12aca228842c98b890ad2bf8422b87fb11d98bdac9ff0a450f8f4b742b81fcc90b1e87a6edc68f36ee07a9d33835cbd6d3a707f873dc5abf45ccaa27e410c54c1635cc0e955b42bb093594c4b1f5a83a5af5991cc9cb7969ea68e7ee63dd8785cd6a6de865cb7258061553b778f43e056c11c6b218b38a3c41d53b89fa2fb4802a206042eaf39e261bdbd4848339ecfea5caf62fcee5c4adb175e77c090b0eba4fc842681b171c51180c60593c369729f4599b23cbb047af96ff984363bfcd57bb09caae35add5ba12250a266c8b242f4db0afa2c3e0c8d6c588f4616dfaaa71f77618c1e8c926f0b188a8d96786e0de7e7ea50c942335b6b893af328bf535c56b06260b11261ca2a0884f57f747b24863adf44b3232783ab975683fb7e4c2073b5df81fe71e809e58b7c28f85711b7740c081274ae4655e1a0b826f4510b4d4595f3f98595bbfc2dd430a137c92a6fd4e8127ec0c15e75f21407445d08c920190f72ae6415362e0adc53599306ba7369f0ff2a724dc6617437622d5e082705cf0619a049c808363140d7088eb2986f64798e24a8342251c161c7ef993bd4f399ca7d974b5b2ab71f78a56d87f7784fe81668fc177e6f6c9059416de1cee23d3179c28e7bebe0cb333c85d4dfda475fcf17c9d3195ad7c71a9326a4dbbe94751fa5512e43381f19695a44fa1390ef781ccf7c6b073854f892c2620b7201698beb3766955bcfe1c72896b75b1b8fb43100601cab530c61c6f006b7b3943ffee1e9c0cb384487864d3cabc3394caafc0836c1ddc5bf71969402e97fa3fe00f7c522bfc380ed8a4b750935f21e04eae5c1c0009fa4fe0037b03f01a7584c5b451b9aaf0a9ac18a4cd780d4d38b6715787a4db1cd2f3e54b987170f939601a2d35b35527b6df6eb412551fed4a5a0bab594303f8590ee1f740c82fbe355498b1769c2b13a677a5c5fd2e52aae02fee3cf7aa2e36c4a33f2e1c96d9df78bab506fc5269ee4ef58ce93efcde584b8fd35af490e5dd4e409a49fb4e896e51577db225a01c51bf872434d4974c7db6ee87a8e7ed1bf084e0c9f82fa20c7c2059ad48c947490e5fe1c890d767968c805cedb83f8d174e99350503aeb27121aed8708653fe1ad1af006205802e950b92e7c4672e3cce4cae7664114f295cbf1ea08f7521b8fa85dfc4241d091bc9d67161c5c1edfad1d109cd320e5b6fe44292add58473c82327150b76fca61c8c40726ccc78fdb5669e3cdbde91df86ed758cf09a345ec301d33bb91266eaf1293289bfd235a47673d74e01c4d4122d60a15d8f6bbf80b3a24390b36aa1b91d0c39d2b1e73fafc41d5300b28d8c251e6ec6efb1bb803d88a1591c05f7a20fca5b0e78a9255d3d9b625b9573d1f3018272012e2c1243b7e5f17fe2eac01eac0f5bfaf63d8104a86d39ff9b42c94950ebb4cb764aabd6e18495f56439927469262d6255a0d032474aadd9cfd7c8be59ddfcad6b9c4a118c5629403558f411b7e17bce6fac7de582447bb70245addf76296100584ed00cb82991e130e2f756a8e4cdac6058af86f6edafc036524a74a73642e98e92775e7fa0703a26c5cb4e81e5da59f34aa8199479caeddc46d1926ca6880879b66cba969ac1192284544364aa43200a569f5bb8cbe1dd2e32d27ca6188823726ace4e88cf72ace527a57b24a58d8282ab3ec8dc80bd9d9270b6e5a5a93881be976638f859b4c60019575b05336ba77d6108432518a4744c01518f1380c3956f93d65b1093c2183b0327e348216fbc5b39d76b86badd4a8ec4e100e6dccd904f8feef7a0d481df764108c778a39595fa6486a38010ba5999a468af0a4206a51c0aa7cc84b039fcce5bc106bb3836483c3ef73fa171347881d0a2ef5f4150cc26ed5ea2869f963a3f267a8276c3a718eee0f6b8fad41916c1fada26f8b461ee050ea079ce3ffb0fa2ffe322db3dc3c2457c4ab6eb97ef0a702bc97901f306883263d0fb18ae4b7aed3f4b52c101b11bf03d1d9af765e66f908796a36cc06962c199cbc113b251c0a15350dc9870eff985382bbb4859a07c79173601eb08e71f2f582fb191ffa8d2a8086d5c0231e9aaee8a0f64ed5ff8f1a2dfaa36e2f2a8f8971795670726ebdf2e5f683b803db24c5441c97ad1846a1119ffd73911a9c3cc4cc7f9571e29fd6dfdf8659b1ef215a04236ce9dbbbe28829204ce2de5e6698546b6e5c32b2269d65e9046787966517f4e4267e468e60ccf6f9f4fc3882e3a64744e81ae2492f1176242ee4efebb3c460aa7f10710bf9e327c0970cb6d2a8f1e629ab6d83c8fca7e50546f434d2516b68fd540e7c47c19cae66abd3cffd8ea2e5f908dd70d15d82563653d815b7cc27635af49534093654dbf9b1ec27c22010a69c14ad6c38946175288dd3e873a6dcaba7120c2aec3738713ecc7f713da597d8bfc97ab5cb994c6414566b7e6c562db6ad871c32b5bec84187a9bd9038a3a63615a45a5feaf781b76f6220fe02513b34f37734d33e803191201db0e53096025b6238f524944304f39be7bfcde9e2c45788a8fd5d8dbc690deb4dd0a455674d437a96fc6f77084289be95fd360518ee6e64ffa0adccf97b5d8af205af83cfbc012259e78782bff47d2968397e4f8eb969e4bba086801dd7fdc4442d52bcc4c8bd6f89e92dc919f157384d0e86e03c08a83e83d37e8f7e86323b8047a8653cb33c036a2c498fd78e726a87179753520266d56d02f48428d59f505549dc3ab49e8649351d0f2d6cda574391d9586243af0ea5f7944abdd9f08112cafd6f2e82972d85beaee02aad21686f60ea335d69c9ff9d6b383434bc405f20bbf67abed4e943f3bd48a7276d5d9c464cd5cdbb4a52aa17ef53d0ae51f08a20c998ed04988d44c1bf8870084a8a56d62dd737e4302e55ee2ded8aceac1aa6770c06605c6bd5c9ea83c20d480ae6f984c10df3c2f01625f470d5c25ef612708462042c6094a26fe7cb70131c8afc51540eba097ab894f02dc9f70fce23c1847aacf9441a8c5385d97a3d931666fdb7741e061c8416c8fc1a49659500513311942b2b6cfd788064068ac685a51cd47f46a307de0d8d31a76281b0aaba4cce787756bfaa7af9a9475ef04f4c23959f09be4545359fff2538f559b618f90084aaee4048bc015429d8aa137b6d4755cef5d8070fcfb099fb8471843af6b1b74b88144320d7b1f05fb2f87adc1981b70286a308d1ae46d638343888e141dd8c39574e327497fdcbf0febeb55b9c651fc7191804b21c83d1342466ddda74a730cbb91345af04ed8c08ee2f58d3a9241b002f0cd27a62c67a22734106b687cc005c6e93425136a769262bda5ec0c0c9e0ad71d2a560068d9bc995d71c9eae935e2c2c6f04f3ea9f8d13f72922ee9b42d3276d7c2a6ae336dee3dc3ed6c7bb4f7f74e8f544c25b73d15a438306b8dc9d52eaf1b791512075ebe6f553a738938f107a6f614c529b9db99e53f14a09335aaeb9f7d0b0d50f2934538e02ff76df69fb83534deb97f20a58ac84c2de778f32fa67ccf7ecd738e809fc586c7d920adbcd97fa861faf750c73d5fefeadddbace3039b60f2bea8429b467352ffb6f6032574652dbfce50c62e55c717955881eaeb7d37cf9278ad6dbaccaa6f6530009666590d9d40563d0af2afeb9d315ce0511c8993b19fd790c7ea77ba659579d0865746a30eaf35d3937afce162089addde519ac92bb79100c810a133e1b2e2f7f12ba7ade3b6b9274af0ae09b556f8ca6f92db4f25a464ce82acde2f21516bdbd375d899e69729ac74f0c98ce5ff0e41fc6366909aa0348954b99f75eb468d917d2afc36f63cbbdc1c5284bceb0d3ca451e7b71ce7e1b45cd4422a9bc2de849d7572c232494da04ff8b8cba3d0830828d4667b2f77153f82c08d344b6ce387387d0761bfbe81359d4b1686e02e333033717b03cde9d9dedacf23e1b3880af5887f79cb8a11ccec6658dc30bb6256f4782f5d160f4a8213274fb882e51db3f7e812f3352c1cd31d38c3b057574ca61b0475f255b78e0e3d5247a9aaf704e1e0c7fbc6d50ad7e4ad53afcce6a741125611ebf67fb1d49bca1940f6fe4069f11db7b6a2e70ead520110dd881f8c1f366ca949ed9c382e2ed882645e32f47793fd433e7b4d6c837f95b2a7423bc125af8cfd1c8378c8670e3d55131618fe9c51678a01012950c4c0b49fffe71b5d1ad852992f880219604d3c23b5d9ebe22eb5f725da33a97e0d37205e55a5829d2ef1c739caa8e99af5f0fbd3bce6f58e903cffbd20ccb50b84c43af7bfd6316c7bd871510dabb67d39d4943cfb0986dc1ba1bc69257922fae1ae0298b5680921c8299e2b336b1849961e1cdff99e1510eb59c4eb18e8934bee030133ccda81ce13052bea18b87004abea47abb86375dd1e25c7c8c14f72fe1888058e19850999e2e1bc8caafe6136fd958df0eff63f38a7f7085a37605cad71a2ec904896be15d5c27208a233dab6a025006ecbaa328ef24f36020fa3fb", 0x1000, 0x55}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x8, 0x7ff, r1, &(0x7f0000003200)="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", 0x1000, 0x9}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000001700)="8976899ae425ca84c1121d04746c0bb5cd0717fd2af4fdb8d4fb54cc8ee3ad765a77c551b0e3f6f854", 0x29, 0x1, 0x0, 0x2}])
sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x10, r3, 0x243f6000)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1)
r5 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x400c0c0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000140))
ioctl$SG_IO(r4, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2310.374021][T23815] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2310.382474][T23815] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2310.396820][T23810] loop3: detected capacity change from 0 to 4
[ 2310.408650][T23810] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f006c00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2310.428321][T23810] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:38 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008fdfdffff1d00"})

09:43:38 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf04a00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2310.538665][T23832] loop3: detected capacity change from 0 to 4
[ 2310.572579][T23832] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2310.598157][T23845] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2310.606534][T23845] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2310.613291][T23832] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2310.662804][T23845] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2310.671242][T23845] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2310.685779][T23832] loop3: detected capacity change from 0 to 4
[ 2310.694624][T23832] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2310.714037][T23832] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008fdfdffff1d00"})

09:43:38 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000080)=""/215, 0xd7})
getsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @scatter={0x3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000380)=""/77, 0x4d}]}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0})

09:43:38 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4000000000000000, &(0x7f0000000180))

09:43:38 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf0ff1f, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f007400000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2311.001893][T23867] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2311.010304][T23867] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2311.025860][T23872] loop3: detected capacity change from 0 to 4
[ 2311.036932][T23872] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:38 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:38 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4000080000000000, &(0x7f0000000180))

[ 2311.037701][T23867] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2311.054399][T23867] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2311.054792][T23872] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:38 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1f, 0x4, 0x0, 0x4082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="4e060dfdb822612e9453f379879fdfdd72b66f90cc83794516ddd05d37fe3fe44f86278c35b659399b9530dea78bfc4620585c9db07ad8f369a0663609343cc4dae27ba20c226dcebf8a929d5240f905fee0f695bca8d508f51837305f062e67ab54cf2baee4edc038db9039a433a328db545a2b23689ddf475dd7e00ae7261bb8972fdcfd01479372dbc0cd1b33e1f420e0b179dce8534051ea8787d969a1107c1340eb07b5d9956840267009b03ffa3e95d93c7dbe553c14777c9c9e4c035d3e3c85c6b27df8c0e60fc4d5029ba48908d7246dac52bfb182a51bb7eb7010f28d", 0xe1, 0x8}], 0x100002, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"])
name_to_handle_at(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2000000061000000380200000000000000020000000000000200001d090000000001000000000000"], &(0x7f00000003c0), 0x400)
r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000240)={0xc})

[ 2311.110944][T23872] loop3: detected capacity change from 0 to 4
[ 2311.117876][T23872] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2311.146527][T23872] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:38 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4502000000000000, &(0x7f0000000180))

09:43:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f007a00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2311.156959][T23891] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2311.165315][T23891] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2311.212726][T23891] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2311.219917][T23902] loop3: detected capacity change from 0 to 4
[ 2311.221104][T23891] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2311.232449][T23902] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2311.252983][T23902] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2311.302665][T23902] loop3: detected capacity change from 0 to 4
[ 2311.311923][T23902] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2311.323533][T23902] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:39 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4800000000000000, &(0x7f0000000180))

09:43:39 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
splice(r1, &(0x7f00000000c0)=0x3f, r2, &(0x7f0000000100)=0x9, 0x5, 0x5)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00fe00000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:39 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:39 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x4c00000000000000, &(0x7f0000000180))

09:43:39 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1004000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:39 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x50016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10010, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = dup3(r0, 0xffffffffffffffff, 0x80000)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
dup2(r3, r4)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffc, 0xaa, 0x27, @buffer={0x0, 0x96, &(0x7f0000000080)=""/150}, &(0x7f0000000140)="3cb1fefdb0f29d3ddc89c1db1f6124081c527e7f3a812c9e203a1199208ee8bb9d9b9908834627648b4fc839c69a7e9326034f6dfd7ae6b0cdb870c16db0d5e0f747ee5db806cb3de4a61a6326af72f128df660cf8c0e6dd852abfb651350b05af645ff2e794fb73a3c4fa13a1a8eabb558bd35667770bebe5bd79fe62070505804ab1cad7947c241bf20a74a72e4d38364b884244a4b72618c485cf7e864b9455cf3422db89ffd22107", &(0x7f0000000200)=""/13, 0x554, 0x20, 0x0, &(0x7f0000000240)})
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2311.883251][T23939] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2311.891642][T23939] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2311.909256][    C1] sd 0:0:1:0: [sg0] tag#7759 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2311.909719][T23939] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:39 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1da7000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2311.919644][    C1] sd 0:0:1:0: [sg0] tag#7759 CDB: opcode=0xe5 (vendor)
[ 2311.927956][T23939] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2311.934805][    C1] sd 0:0:1:0: [sg0] tag#7759 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2311.955345][    C1] sd 0:0:1:0: [sg0] tag#7759 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2311.960273][T23945] loop3: detected capacity change from 0 to 4
[ 2311.964935][    C1] sd 0:0:1:0: [sg0] tag#7759 CDB[20]: ba
09:43:39 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc12}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x9)
r3 = getpgrp(0xffffffffffffffff)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x109402, 0xc0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x20, 0x8, 0x1, 0x0, 0x1, 0x40, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe1, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2000, 0x80000001, 0x5, 0x9, 0x3931, 0x7, 0x7, 0x0, 0x100, 0x0, 0x8}, r3, 0xd, r4, 0xb)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x4000000000edb9)
openat(r5, &(0x7f0000000080)='./file0\x00', 0x80, 0x81)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r6, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x2, @buffer={0x0, 0xffffffffffffff26, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2311.989622][T23945] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2312.012930][T23956] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2312.021366][T23956] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:39 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x53efffff00000000, &(0x7f0000000180))

[ 2312.033136][T23945] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:39 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x303d00, 0x3)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001640), 0xdc16}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/210, 0xd2}, {&(0x7f0000000180)=""/236, 0xec}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/132, 0x84}, {&(0x7f0000001440)=""/189, 0xbd}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000001500)=""/141, 0x8d}], 0x8, 0x1, 0x8)

09:43:39 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:39 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x6000000000000000, &(0x7f0000000180))

[ 2312.071672][T23945] loop3: detected capacity change from 0 to 4
[ 2312.087008][T23945] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2312.105464][T23945] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f008d01000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2312.142708][T23979] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2312.151154][T23979] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2312.187817][T23991] loop3: detected capacity change from 0 to 4
[ 2312.200943][T23991] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2312.210679][T23991] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:40 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001dfffffd"})

09:43:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001dfffffd"})

09:43:40 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="72f39e04154c64d73d23620b0c20d6cab001b0c3639b01", 0x17}], 0x1080, &(0x7f0000000180)={[{@huge_advise}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x62, 0x35, 0x63, 0x30, 0x62, 0x63, 0x36], 0x2d, [0x35, 0x36, 0x35, 0x65], 0x2d, [0x34, 0x63, 0x36, 0x31], 0x2d, [0x30, 0x32, 0x30, 0x34], 0x2d, [0x62, 0x36, 0x37, 0x66, 0x34, 0x63, 0x64, 0x30]}}}, {@obj_type={'obj_type', 0x3d, '/dev/sg#\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@obj_type={'obj_type', 0x3d, '/dev/sg#\x00'}}, {@obj_role={'obj_role', 0x3d, '[&z!#}}-'}}]})
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000640)=<r1=>0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setuid(r3)
syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x3f, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000380)="0bc9b44e88685620201c3445d7181150fb947464f92471e2d4e2be8e276e9b8e3592dc6c53b8fc0c741c3cfebf057b92e455ce8e9675ad6dfc36141dadeb5a585bbb7553a6df91c289601c32b1f6ce1ffafb7404257324d8e04bebae055acd7cbc11b2c80562559fe73a32932cca39c8da28f23ada1df1ea1c458976d6cf49fc25c8ba3b1b2ca7a7556ae57da93a8723c33689bf8188b31b68759876286ac19b52a305d48a69e9be406f94fc8ef8111e40efda140a47a5324a52fece94cc0a8e79e7703f67a3674cffe80e4b865539f00c47e5fb5a23cc4128026cda1299812ef295adf3575e9cb0a57d40d40f17d2d1", 0xf0, 0x5}, {&(0x7f0000000480)="004a8cf1ae1c0e55f2c5863fc128b72dce4bd1aac0aa9e1152dd5cbbfa50710c10d4c7ac64cb1f366589a1fad3c5c638be58dc33b84819c67d76374e50bb07542b485cc96486ac7716d94df6a8a610f236ac02c558bca89c432b1714216afee46db1c0d81bab2800", 0x68, 0x2000000000000000}, {&(0x7f0000000500)="5db9f4ac2df0447b2825bba4666aec4c1270b68ed645e8b1f2a23c8ae154851d417281041da86c855fe0b62fbc22cc24e33b2062fbe45afd43557d0512563d774d6cb083088f67cd84daff92bfa613232c254f0605fc13fb05b6933a39ec005f19294485995b3564150d54e88793ba5d869228cabb1545280eeaa5d11bd0524a62506e7e1ad2fbf777040e453ef4589c2224", 0x92, 0x3}, {&(0x7f00000002c0)="bd3a21bd50e59f20716cdf81f9e979124bd545acab6210970aa565fe86", 0x1d, 0x3ff}], 0x101000, &(0x7f0000000680)=ANY=[@ANYBLOB="73697a653d386d30672c6e725f696e6f6465733d782c687567653d6164766973652c6e725f696e6f579a837b7a4a6a9f594add6465", @ANYRESDEC=r1, @ANYBLOB="2c686173682c6673757569643d36643435646630372d619438312d343638332d656100362d65363436313030622c7375626a5f747970653d242c736d61636b66736861743d2927233a2c7569643d", @ANYRESDEC=r3, @ANYBLOB=',subj_role=fsmagic,hash,audit,smackfsdef=huge=advise,\x00'])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)

09:43:40 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x6800000000000000, &(0x7f0000000180))

09:43:40 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00ba01000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2312.786274][T24010] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2312.790555][T24013] loop3: detected capacity change from 0 to 4
[ 2312.794682][T24010] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2312.811918][T24013] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2312.821660][T24013] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:40 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x6c00000000000000, &(0x7f0000000180))

[ 2312.842280][T24010] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2312.850806][T24010] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2312.870949][T24013] loop3: detected capacity change from 0 to 4
09:43:40 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x1800005, 0x30, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x100, 0x101000)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001400), 0x501000, 0x0)
openat(r4, &(0x7f0000001440)='./file0\x00', 0x80, 0x80)
recvmmsg(r1, &(0x7f00000012c0)=[{{&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000640)=""/176, 0xb0}, {&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/132, 0x84}, {&(0x7f00000008c0)=""/56, 0x38}], 0x6, &(0x7f0000000980)=""/71, 0x47}, 0xce}, {{&(0x7f0000000a00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a80)=""/206, 0xce}, {&(0x7f0000000b80)=""/185, 0xb9}, {&(0x7f0000000c40)=""/124, 0x7c}], 0x3, &(0x7f0000000d00)=""/121, 0x79}, 0x8}, {{&(0x7f0000000d80)=@pppol2tpv3in6, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/13, 0xd}, {&(0x7f0000000e40)=""/145, 0x91}], 0x2, &(0x7f0000000f40)=""/227, 0xe3}, 0x9}, {{&(0x7f0000001040)=@phonet, 0x80, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/120, 0x78}, {&(0x7f0000001140)=""/43, 0x2b}, {&(0x7f0000001180)=""/32, 0x20}], 0x3, &(0x7f0000001200)=""/178, 0xb2}, 0x101}], 0x4, 0x40002000, &(0x7f00000013c0)={0x77359400})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000014c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
io_uring_enter(r0, 0x4ae6, 0xd0e3, 0x2, &(0x7f0000000400)={[0x1]}, 0x8)
sendfile(r5, r6, 0x0, 0x4000000000edb9)
io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f00000000c0)="f8213383336af32b6a4051eb55967d9fe7d7c83fbfe005cd1660a85a1d3e5980601679d12b26c525f4b68dc57ef81cbc3d6452b69a8a5f5b8a73328b158dca3dbd082fe1c1d371bbbc2b4cab9d72cd830367b7377b7459c2ac80351426b5983479b99571425ef2a855", 0x69, 0x100, 0x0, 0x1, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x401, r1, &(0x7f0000000180)="3fe0d2efeb66e720ce77176e45683bce3fd9c959efcd36a412c5676d2161125aec2b89b79ef1e96840b617c052af940f49916034c4557f05706c388d6d9b5da5", 0x40, 0x1ff, 0x0, 0x1, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000000200)="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", 0xfb, 0xf38, 0x0, 0x2}])

09:43:40 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2312.888413][T24013] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2312.910901][T24013] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2312.933425][T24034] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000402000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:40 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7202000000000000, &(0x7f0000000180))

09:43:40 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2312.941812][T24034] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2312.955361][T24034] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2312.963877][T24034] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2313.044022][T24050] loop3: detected capacity change from 0 to 4
[ 2313.055140][T24051] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2313.063560][T24051] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2313.063634][T24050] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2313.083924][T24050] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2313.084798][T24051] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2313.101718][T24051] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2313.155682][T24050] loop3: detected capacity change from 0 to 4
[ 2313.162370][T24050] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2313.172082][T24050] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:41 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001dfdfdff"})

09:43:41 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001dfdfdff"})

09:43:41 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)=ANY=[@ANYBLOB="067fb01a90649d1d1fb8e9e4c30700000000000000c1d44a1c2323a4725cb3b5ae755841390000000000000000"])
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000000c0))
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000078c000/0x1000)=nil, 0x1000, 0x1000001, 0x80010, 0xffffffffffffffff, 0xc24b7000)
recvmmsg(r3, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
fcntl$setflags(r3, 0x2, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = epoll_create(0x2)
r5 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x10000000)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5)

09:43:41 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7400000000000000, &(0x7f0000000180))

09:43:41 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:41 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f004502000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2313.705257][T24079] loop3: detected capacity change from 0 to 4
[ 2313.710689][    C1] sd 0:0:1:0: [sg0] tag#7760 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2313.716843][T24079] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2313.721727][    C1] sd 0:0:1:0: [sg0] tag#7760 CDB: opcode=0xe5 (vendor)
[ 2313.737590][    C1] sd 0:0:1:0: [sg0] tag#7760 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2313.747169][    C1] sd 0:0:1:0: [sg0] tag#7760 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2313.750718][T24079] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2313.756735][    C1] sd 0:0:1:0: [sg0] tag#7760 CDB[20]: ba
[ 2313.775041][T24080] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2313.782791][    C1] sd 0:0:1:0: [sg0] tag#7761 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2313.783507][T24080] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2313.793829][    C1] sd 0:0:1:0: [sg0] tag#7761 CDB: opcode=0xe5 (vendor)
[ 2313.811680][    C1] sd 0:0:1:0: [sg0] tag#7761 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2313.821242][    C1] sd 0:0:1:0: [sg0] tag#7761 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2313.830804][    C1] sd 0:0:1:0: [sg0] tag#7761 CDB[20]: ba
[ 2313.840396][T24080] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:41 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TIOCSBRK(r0, 0x5427)

09:43:41 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6020000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2313.848952][T24080] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2313.864071][T24079] loop3: detected capacity change from 0 to 4
09:43:41 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7a00000000000000, &(0x7f0000000180))

09:43:41 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f007202000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2313.897544][T24079] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2313.916613][T24100] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2313.921747][T24079] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2313.925016][T24100] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:41 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:41 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x7fffffffffffffff, &(0x7f0000000180))

[ 2313.965708][T24100] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2313.974090][T24100] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2313.981223][T24111] loop3: detected capacity change from 0 to 4
[ 2314.023394][T24111] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2314.054164][T24111] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2314.064175][T24123] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2314.072624][T24123] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2314.086862][T24123] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2314.095301][T24123] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2314.135628][T24111] loop3: detected capacity change from 0 to 4
[ 2314.142302][T24111] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2314.152720][T24111] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:42 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:42 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:42 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x85ffffff00000000, &(0x7f0000000180))

09:43:42 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, <r2=>0x0, <r3=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000400)={{}, r3, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r4]}, @devid})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYRESOCT, @ANYRES32=r2, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={r5, 0xc599, 0x3, 0x1})
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x168, 0x0, 0x40d, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0xd}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffe00}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x23}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfe00}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x6}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x50)
r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknodat$null(r7, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0)
preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r9, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000003000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:42 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2314.585319][T24148] loop3: detected capacity change from 0 to 4
[ 2314.594664][T24147] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2314.596094][T24148] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2314.603097][T24147] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2314.624593][T24148] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:42 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x8cffffff00000000, &(0x7f0000000180))

[ 2314.683279][T24148] loop3: detected capacity change from 0 to 4
[ 2314.690200][T24148] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2314.700127][T24148] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2314.718464][T24163] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:42 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x8d01000000000000, &(0x7f0000000180))

09:43:42 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2314.726968][T24163] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000204000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:42 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x41)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
openat(r1, &(0x7f0000000080)='./file0\x00', 0x444001, 0x48)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2314.817721][T24193] loop3: detected capacity change from 0 to 4
[ 2314.828711][T24193] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2314.838577][T24187] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2314.843828][T24193] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2314.846913][T24187] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2314.872756][T24187] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2314.881191][T24187] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2314.943633][T24193] loop3: detected capacity change from 0 to 4
[ 2314.950186][T24193] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2314.959622][T24193] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:42 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:43 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:43 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x92f719bf00000000, &(0x7f0000000180))

09:43:43 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:43 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000604000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:43 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x97ffffff00000000, &(0x7f0000000180))

[ 2315.458671][T24227] loop3: detected capacity change from 0 to 4
[ 2315.473237][T24227] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2315.482682][T24227] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2315.483915][T24233] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2315.500419][T24233] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:43 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
recvmmsg(r0, &(0x7f0000001740)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/219, 0xdb}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000800)=""/220, 0xdc}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000980)=""/8, 0x8}], 0x7, &(0x7f0000000a40)=""/186, 0xba}, 0x6}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000c80)=""/169, 0xa9}, {&(0x7f0000000d40)=""/123, 0x7b}, {&(0x7f0000000dc0)=""/23, 0x17}, {&(0x7f0000000e00)=""/84, 0x54}, {&(0x7f0000000e80)=""/48, 0x30}, {&(0x7f0000000ec0)=""/65, 0x41}], 0x7, &(0x7f0000000fc0)=""/32, 0x20}, 0x8001}, {{&(0x7f0000001000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=""/94, 0x5e}, 0x20}, {{&(0x7f0000001140)=@alg, 0x80, &(0x7f0000001680)=[{&(0x7f00000011c0)=""/167, 0xa7}, {&(0x7f0000001280)=""/22, 0x16}, {&(0x7f00000012c0)=""/75, 0x4b}, {&(0x7f0000001340)=""/107, 0x6b}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f00000014c0)=""/255, 0xff}, {&(0x7f00000015c0)=""/32, 0x20}, {&(0x7f0000001600)=""/38, 0x26}, {&(0x7f0000001640)=""/52, 0x34}], 0x9}, 0x9}], 0x4, 0x10040, &(0x7f0000001840)={0x77359400})
sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000380)={0x0, 0x7, 0x4})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000001880), 0x4)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001080), 0x200, 0x0)
mmap(&(0x7f0000373000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r3, 0x90d3c000)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2315.536766][T24233] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2315.545181][T24233] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2315.560719][T24227] loop3: detected capacity change from 0 to 4
[ 2315.568847][T24227] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:43 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:43 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xba01000000000000, &(0x7f0000000180))

[ 2315.579479][T24227] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f001004000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:43 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xdaffffff00000000, &(0x7f0000000180))

[ 2315.623781][T24254] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2315.632180][T24254] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2315.647426][T24254] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2315.655841][T24254] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2315.728760][T24269] loop3: detected capacity change from 0 to 4
[ 2315.740080][T24269] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2315.751438][T24269] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2315.783143][T24269] loop3: detected capacity change from 0 to 4
[ 2315.795437][T24269] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2315.805519][T24269] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:43 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:43 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:43 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000080))

09:43:43 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:43 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xf6ffffff00000000, &(0x7f0000000180))

09:43:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000005000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2316.352727][T24301] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2316.356043][T24302] loop3: detected capacity change from 0 to 4
[ 2316.361138][T24301] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2316.378605][T24302] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2316.391065][    C1] sd 0:0:1:0: [sg0] tag#7762 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2316.391408][T24301] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2316.401473][    C1] sd 0:0:1:0: [sg0] tag#7762 CDB: opcode=0xe5 (vendor)
[ 2316.409896][T24301] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2316.416742][    C1] sd 0:0:1:0: [sg0] tag#7762 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2316.431609][T24302] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:44 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:44 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xf801000000000000, &(0x7f0000000180))

[ 2316.437263][    C1] sd 0:0:1:0: [sg0] tag#7762 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2316.456094][    C1] sd 0:0:1:0: [sg0] tag#7762 CDB[20]: ba
[ 2316.504510][T24319] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2316.512942][T24319] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2316.527883][T24302] loop3: detected capacity change from 0 to 4
[ 2316.534738][T24302] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2316.535801][T24319] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:44 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000380)={<r4=>0x0, 0x0, "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", "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"})
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000840)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, 0x0)
r10 = openat$incfs(r6, &(0x7f0000000040)='.pending_reads\x00', 0xc8700, 0xc7)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000000a40)={r9, r7, "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", "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"})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@hci, 0x0, 0x80000, 0x1}, 0x9)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {r8}, {r7, r9}, {}, {}, {r8, r9}, {r8}, {r8}, {}, {0x0, r9}, {r7}, {}, {}, {}, {r8}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r8}, {}, {}, {}, {}, {r7, r9}, {}, {r7}, {0x0, r9}, {}, {}, {}, {}, {}, {r8}, {r7}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r8, r9}, {}, {r7, r9}, {}, {r7, r9}, {}, {0x0, r9}, {r7}, {}, {}, {}, {r7, r9}, {}, {r8}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {r7}, {}, {}, {}, {r8}, {}, {}, {0x0, r9}, {}, {}, {}, {r7}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {r8}, {}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {}, {r8}, {}, {0x0, r9}, {r8}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {}, {}, {}, {r8}, {r7}, {r8}, {0x0, r9}, {}, {}, {}, {}, {r7}, {r7, r9}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8, r9}, {}, {0x0, r9}, {r8}, {r7}, {r7}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}], 0x3f, "4c69a69153a7fc"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002200)={r4, r8, "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", "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"})

09:43:44 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xf9fdffff00000000, &(0x7f0000000180))

09:43:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000006000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2316.552184][T24319] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2316.554360][T24302] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:44 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2316.636165][T24336] loop3: detected capacity change from 0 to 4
[ 2316.644432][    C0] sd 0:0:1:0: [sg0] tag#7763 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2316.654808][    C0] sd 0:0:1:0: [sg0] tag#7763 CDB: opcode=0xe5 (vendor)
[ 2316.656497][T24336] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2316.661670][    C0] sd 0:0:1:0: [sg0] tag#7763 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2316.661692][    C0] sd 0:0:1:0: [sg0] tag#7763 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2316.671735][T24340] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2316.680283][    C0] sd 0:0:1:0: [sg0] tag#7763 CDB[20]: ba
[ 2316.693553][T24336] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2316.698199][T24340] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2316.704329][    C0] sd 0:0:1:0: [sg0] tag#7764 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2316.734456][    C0] sd 0:0:1:0: [sg0] tag#7764 CDB: opcode=0xe5 (vendor)
[ 2316.741362][    C0] sd 0:0:1:0: [sg0] tag#7764 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2316.750947][    C0] sd 0:0:1:0: [sg0] tag#7764 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2316.760525][    C0] sd 0:0:1:0: [sg0] tag#7764 CDB[20]: ba
[ 2316.769219][T24340] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2316.770356][    C0] sd 0:0:1:0: [sg0] tag#7765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2316.777592][T24340] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2316.787927][    C0] sd 0:0:1:0: [sg0] tag#7765 CDB: opcode=0xe5 (vendor)
[ 2316.805762][    C0] sd 0:0:1:0: [sg0] tag#7765 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2316.815328][    C0] sd 0:0:1:0: [sg0] tag#7765 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2316.824893][    C0] sd 0:0:1:0: [sg0] tag#7765 CDB[20]: ba
[ 2316.836114][T24336] loop3: detected capacity change from 0 to 4
[ 2316.848001][T24336] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2316.859333][T24336] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:44 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:44 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:44 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfdfdffff00000000, &(0x7f0000000180))

09:43:44 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x11000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:44 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = syz_io_uring_complete(0x0)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x4, 0x72, 0x1, 0xe1, 0x0, 0x4, 0x110200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x92, 0x1, @perf_bp={&(0x7f0000000100)}, 0x40000, 0x0, 0x7ff, 0x4, 0x401, 0x2, 0xb54, 0x0, 0x727e, 0x0, 0x4}, r0, 0x5, r1, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x227f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000406000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:44 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:44 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfdffffff00000000, &(0x7f0000000180))

[ 2317.224376][T24373] loop3: detected capacity change from 0 to 4
[ 2317.232804][T24378] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2317.241215][T24378] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2317.258605][T24373] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2317.268236][T24373] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2317.293587][T24378] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2317.302098][T24378] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:44 executing program 5:
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0xbb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = fcntl$getown(r1, 0x9)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r3, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000cc0))
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0xa3, 0x0, @buffer={0x0, 0x6b, &(0x7f0000000140)=""/107}, &(0x7f0000000540)="fb574b84f92f18ffa94d9ff83158084d2b72bfdd7f3fd3c450273d5cae6b3c5f21d1a7a0cf668de35f0a5f667414e3adaaedaf68928b5da6c671f1667b6455659aa32fc5462bde56b372b81b48241bdfb0510b0f043870956d99f96736917b98a5219f6524b035f3f21c644fa6e88c4e1afb3b01b8aec6663eba9aad120fe8cd1496961b9aac6843f0ee78eaaa2ebd056a78f6ace42dc60191f705cac3b27f0787bdc1", &(0x7f0000000600)=""/248, 0x8, 0x20, 0xffffffffffffffff, &(0x7f00000001c0)})
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x80, 0x81, 0x0, 0x0, 0x2, 0x40000, 0x43858a1b75339302, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x1, 0x8000, 0x9, 0x401, 0x6, 0x28, 0x0, 0x1}, r2, 0xc, r3, 0x3)

09:43:45 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x12000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2317.323618][T24373] loop3: detected capacity change from 0 to 4
[ 2317.338105][T24373] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2317.348966][T24373] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:45 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfeffffff00000000, &(0x7f0000000180))

[ 2317.370500][    C0] sd 0:0:1:0: [sg0] tag#7766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2317.380885][    C0] sd 0:0:1:0: [sg0] tag#7766 CDB: opcode=0xe5 (vendor)
[ 2317.387758][    C0] sd 0:0:1:0: [sg0] tag#7766 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2317.397298][    C0] sd 0:0:1:0: [sg0] tag#7766 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2317.406872][    C0] sd 0:0:1:0: [sg0] tag#7766 CDB[20]: ba
[ 2317.429017][    C0] sd 0:0:1:0: [sg0] tag#7767 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2317.429768][T24408] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2317.439402][    C0] sd 0:0:1:0: [sg0] tag#7767 CDB: opcode=0xe5 (vendor)
[ 2317.439424][    C0] sd 0:0:1:0: [sg0] tag#7767 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2317.447734][T24408] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:45 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2317.454567][    C0] sd 0:0:1:0: [sg0] tag#7767 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2317.484624][    C0] sd 0:0:1:0: [sg0] tag#7767 CDB[20]: ba
[ 2317.503457][T24408] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2317.511844][T24408] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:45 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00ffff"})

09:43:45 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00ffff"})

09:43:45 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000007000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:45 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfeffffffffffffff, &(0x7f0000000180))

09:43:45 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x13000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:45 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x8001, 0x2})
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2318.100421][T24440] loop3: detected capacity change from 0 to 4
[ 2318.113327][T24438] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2318.117973][T24440] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2318.121778][T24438] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:45 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc13}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = getegid()
statx(r1, &(0x7f0000000280)='./file0\x00', 0x4000, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
chown(&(0x7f0000000240)='./file0\x00', r5, r7)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fsetxattr$system_posix_acl(r3, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010007000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0xee00, @ANYBLOB="04000600000000000800bf75", @ANYRES32=0x0, @ANYBLOB="0500000018d8ea451f80bca04caea218c9cdf9f6169a63b148b8c4b5e79748ef507edf161c2207130f5dd57b1452542e87a98a8f66456fb9434ea3a4d55d846368", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="10000100000000002000020000000000"], 0x74, 0x3)
r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000780), 0x40000, 0x0)
io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000600)="2afb26617f8cdb728d455e793ea2a088a197336f4e03a550a4b49b714fa14d735640d3c811bdc1387589dd3d9910566f35f56abed22342671428f5bc5e97b1c28bd89e3b3e07708d59449154d7d089f28406e247635ae6e61c1bd76e07420b2cf95edeed3be003", 0x67, 0xffff, 0x0, 0x0, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x4, r9, &(0x7f00000007c0)="1f864e39a0beeb624558792ffa041fcf5469c90fed8ad0efefeb1d16a4c57dcf34465de28fa26a025fa820f3c6c74eb47f4c026442ffe3436e29eb0bc0161a0f76b1c4ddc5429dc2cc9bb140cb1e631481ee602b3a0d67ef2775a45688a2543aab2cc6a858741dcf5f221966cebb48a4d7ff8f24964a4e35a0dc7516c4367639ea9e8e84258b8d8c5b271ff4524cbe2b16be9c3d2ccb43369afcab842d8ba094967affe96804da", 0xa7, 0x3, 0x0, 0x0, r1}])
r10 = openat2(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x20000, 0x1, 0x13}, 0x18)
ioctl$INCFS_IOC_FILL_BLOCKS(r10, 0x80106720, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x400000, 0x3a, &(0x7f0000000100)="8178b8e1de87a6a562262c509e7d724774d93e5ce8c3d5dbff6c0093d04e48d65bc24635ae52a43b6cca76a49c9aa9f18637e4b5a41b670feea3", 0x1}, {0x0, 0x33, &(0x7f0000000140)="a32f3f0820ef64f85a3e5b98d29e616bdda6bc4c0f358bc184b1a45513ac050436b1b593b583f394ff45b7b118fd33688af909", 0x1}]})
r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r11, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:45 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xff0f000000000000, &(0x7f0000000180))

09:43:45 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x15dc0000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2318.132116][T24440] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2318.157031][T24438] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2318.165443][T24438] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:45 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40100, 0x122)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2318.217962][T24440] loop3: detected capacity change from 0 to 4
[ 2318.227534][T24440] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2318.240960][T24464] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2318.249397][T24464] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:45 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfffbffff00000000, &(0x7f0000000180))

09:43:45 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000009000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2318.256929][T24440] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2318.276841][T24464] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2318.285284][T24464] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2318.353308][T24484] loop3: detected capacity change from 0 to 4
[ 2318.364862][T24484] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2318.378378][T24484] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2318.418177][T24484] loop3: detected capacity change from 0 to 4
[ 2318.424796][T24484] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2318.434623][T24484] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:46 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00fdfd"})

09:43:46 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00fdfd"})

09:43:46 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1ffff000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:46 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x1, 0x3, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80, 0x4b)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000080))

09:43:46 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffff7f00000000, &(0x7f0000000180))

09:43:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00000a000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2318.981040][T24508] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2318.988491][T24514] loop3: detected capacity change from 0 to 4
[ 2318.989438][T24508] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2318.999910][T24514] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2319.016228][    C0] sd 0:0:1:0: [sg0] tag#7768 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2319.019541][T24514] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2319.026606][    C0] sd 0:0:1:0: [sg0] tag#7768 CDB: opcode=0xe5 (vendor)
[ 2319.042726][    C0] sd 0:0:1:0: [sg0] tag#7768 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2319.044797][T24508] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2319.052304][    C0] sd 0:0:1:0: [sg0] tag#7768 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2319.060628][T24508] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:46 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:46 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xdc16}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x80000000000000, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @scatter={0x6, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/209, 0xd1}, {&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000640)=""/197, 0xc5}, {&(0x7f0000000740)=""/227, 0xe3}]}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0})

[ 2319.070198][    C0] sd 0:0:1:0: [sg0] tag#7768 CDB[20]: ba
[ 2319.097718][    C0] sd 0:0:1:0: [sg0] tag#7769 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2319.108152][    C0] sd 0:0:1:0: [sg0] tag#7769 CDB: opcode=0xe5 (vendor)
[ 2319.115013][    C0] sd 0:0:1:0: [sg0] tag#7769 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2319.124591][    C0] sd 0:0:1:0: [sg0] tag#7769 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2319.126719][T24525] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2319.134180][    C0] sd 0:0:1:0: [sg0] tag#7769 CDB[20]: ba
[ 2319.142505][T24525] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2319.162914][T24525] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:46 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffffff00000000, &(0x7f0000000180))

09:43:46 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x401, 0xa8e8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x20, 0xef, 0xb2, 0x0, 0x0, 0x8002, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0xffff}, 0x4121, 0xffff, 0xc3, 0x4, 0x0, 0xfff, 0x2, 0x0, 0x80, 0x0, 0x3}, 0x0, 0xf, r0, 0x8)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VT_RELDISP(r0, 0x5605)

09:43:46 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x21000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2319.171296][T24525] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00000b000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2319.243551][T24541] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2319.245622][T24543] loop3: detected capacity change from 0 to 4
[ 2319.251945][T24541] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2319.262044][T24543] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2319.278636][T24543] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2319.281261][T24541] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2319.296556][T24541] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:47 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:47 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:47 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000180)={0x2, 0x83a3, 0xe6, &(0x7f0000000080)=""/230})
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:47 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffffffffff0700, &(0x7f0000000180))

09:43:47 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x27000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00000c000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2319.880044][T24571] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2319.888423][T24571] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2319.906381][T24571] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2319.908594][T24574] loop3: detected capacity change from 0 to 4
09:43:47 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:47 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffffffffffff7f, &(0x7f0000000180))

[ 2319.914792][T24571] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2319.927659][T24574] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2319.966975][T24574] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:47 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xac0, 0x27)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:47 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2319.989881][T24588] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2319.998309][T24588] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2320.017798][T24588] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2320.026240][T24588] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:47 executing program 5:
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={<r0=>0x0, 0x1, 0x8000, 0x1})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={r0, 0x7fff, 0xb6})
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8010, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x42, 0x7, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(r1, &(0x7f0000000040)='/proc/self/exe\x00', 0x41, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000200)=""/25, 0x19}], 0x2, 0x0, 0x27)
preadv(r3, &(0x7f0000000280), 0x0, 0x1f, 0x9)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0xd2, 0x3f, 0x6, 0x6, 0x0, 0x4, 0x14a6, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7613, 0x3f}, 0x12000, 0x100, 0x6, 0x0, 0x1000000000009, 0x401, 0x3f, 0x0, 0x55, 0x0, 0x5})

09:43:47 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xfffffffffffffffe, &(0x7f0000000180))

[ 2320.068847][T24574] loop3: detected capacity change from 0 to 4
[ 2320.083150][T24574] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2320.103648][T24574] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2320.121449][T24604] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2320.129836][T24604] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:48 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:48 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00000d000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:48 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x1f)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:48 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180))

09:43:48 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2320.725786][T24630] loop3: detected capacity change from 0 to 4
[ 2320.744391][T24630] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2320.754413][T24630] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2320.765320][T24639] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:48 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000edb9)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x1, 0x9, 0x5, 0x0, 0x0, {0xc}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x40091)

09:43:48 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

[ 2320.773752][T24639] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2320.797492][T24639] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2320.805853][T24639] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:48 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x68000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2320.829292][T24630] loop3: detected capacity change from 0 to 4
[ 2320.837764][T24630] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2320.864621][T24630] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:48 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x2})

09:43:48 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
open_tree(r1, &(0x7f0000000440)='./file0\x00', 0x80000)
flistxattr(r0, &(0x7f0000000080)=""/34, 0x22)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101300, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f0000000380)=""/139, 0x8b}], 0x4, 0x1f, 0x419)

[ 2320.878467][T24653] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2320.899152][T24660] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2320.907533][T24660] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00000e000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2320.948025][T24660] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2320.956410][T24660] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2320.975539][T24670] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2321.003532][T24679] loop3: detected capacity change from 0 to 4
[ 2321.017570][T24679] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2321.027342][T24679] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2321.058197][T24679] loop3: detected capacity change from 0 to 4
[ 2321.076280][T24679] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2321.086092][T24679] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:48 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:49 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:49 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3ec6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x6)
r3 = getuid()
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="b4030000150001002abd7000fedbdf25fc000000000000000000000000000001200100000000000000000000000000014e2000004e210401020020205e000000909c195ceb5d883e9edb719ff89ba15c6e47139ee9281dba7d46b42a343f578d", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="00000000000000000800000000000000000200000000000007000000000000000000000000000000ce0c0000000000000700000000000000090000000000000001000000000000003b0c0000000000000002000000000000810000000000000001000000bc6b6e000201000300000000ac000700ac1414bb000000000000000000000000fe8800000000000000000000000000014e2200004e2100000000208033000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="060000000000000003000000000000000004000000000000db030000000000000180000000000000a20400000000000003000000000000000200000000000000030a000000000000000100000000000004000000000000003f00000000000000f8ffffffb66b6e000102030000000000"], 0x3b4}, 0x1, 0x0, 0x0, 0x4004}, 0x8000)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:49 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x3})

09:43:49 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00000f000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2321.627630][T24707] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2321.639644][T24710] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2321.643727][T24711] loop3: detected capacity change from 0 to 4
[ 2321.648038][T24710] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2321.658334][T24711] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:49 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000edb9)
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000080)={0x7, 0x7f})
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = gettid()
rt_sigqueueinfo(r2, 0xa, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x30818, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x2200, 0x0, 0x0, 0x9}, r2, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @window={0x3, 0x6, 0x9}], 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:49 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080), 0x0, 0xff, 0x4)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:49 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x4})

[ 2321.681192][T24711] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2321.698167][T24710] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2321.706543][T24710] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:49 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x74000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:49 executing program 5:
creat(&(0x7f0000001480)='./file0\x00', 0x9)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(r0, &(0x7f00000002c0)='./file0\x00', 0x400, 0x0)
listxattr(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)=""/63, 0x3f)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x6, 0x400200)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000001380)={0x53, 0xfffffffffffffffb, 0x1000, 0x9, @buffer={0x0, 0xa7, &(0x7f00000000c0)=""/167}, &(0x7f0000000380)="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", &(0x7f0000000180)=""/232, 0x7f, 0x10005, 0xffffffffffffffff, &(0x7f0000000280)})
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2321.773332][T24711] loop3: detected capacity change from 0 to 4
[ 2321.782918][T24711] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2321.795007][T24727] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2321.812338][T24711] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:49 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x5})

[ 2321.816835][T24736] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2321.830107][T24736] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2321.844981][T24736] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2321.853350][T24736] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2321.921681][T24750] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:49 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:50 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000410000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:50 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000166000/0x4000)=nil, 0x4000, 0x1800003, 0x1010, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x84, 0xac, 0xfd, 0x7, 0x0, 0x2, 0x40, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x4, @perf_config_ext={0x100, 0x9}, 0x10, 0x0, 0x200, 0x3, 0x7, 0x1, 0x1f, 0x0, 0x3, 0x0, 0x101}, 0xffffffffffffffff, 0xa, r2, 0x2)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:50 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x6})

09:43:50 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x7})

[ 2322.506697][T24774] loop3: detected capacity change from 0 to 4
[ 2322.512873][T24772] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2322.520031][T24777] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2322.528515][T24777] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2322.532707][T24774] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:50 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8cffffff, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2322.549011][T24774] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2322.566201][T24777] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2322.574638][T24777] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2322.589334][T24786] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:50 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x200)
writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="8388e30b499e6fbb9016f5c473bf7f1e7f5f372654e64929dfeb43f89e3302c1e90c471be9e7329625d84be921eeb6b866548b2a5c87f5fc566db70ef4d56204939d691f5bf08a474a198225589f534147688d2e8499b4cbf5f0f3c7ec407c7da489c5487206b2f2dc13ca13f3a15cb6b052ff27650c3bb70e17181b0d28c417ee48874eaa171f379d97ee871a3d43af7ddc7ed60d351aee17b2a340fc24913fcc56c3c48738c5a3c705dcb10dad73631f512c2519d515ad08ec600413e373bca7592f87db748a44271436e1395099ffc1506b34d0c8501e", 0xd8}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000001c0)="1a994439427e45a05260945f939d625c3385b5e9b17c438f10ed16a7cdb73dab21d3bf5e2e84cc21030aa6996b6a3222c2eb0a51358e2010360fbbcac5eecb2b52f096df4b088bd6c1ca3fe402abc3d0a4df101040976a6c31dc24d12d4587c66d3a7d158386a1c97377798cd91fce89233ceebdc7821f42ab16750114b6273f09bfa88a2ba7b898e407897f34877aaa2db60b1d6bf6f2ebd355a9a39e0423e92e4a5e4bd8036d97704d6669f61ecb63dbf148406ac66978357d2194c1b1041324ebeb9d70c57a755045ce4328147dd65a603c80", 0xd4}], 0x3)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:50 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x8})

[ 2322.604294][T24774] loop3: detected capacity change from 0 to 4
[ 2322.617229][T24774] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2322.638578][T24774] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2322.658810][T24795] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2322.667203][T24795] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2322.678695][T24801] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2322.698415][T24795] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f002010000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:50 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe82a1b00, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2322.706817][T24795] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2322.731647][T24812] loop3: detected capacity change from 0 to 4
[ 2322.762666][T24812] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2322.778219][T24812] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2322.782328][T24819] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2322.795880][T24819] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2322.843067][T24812] loop3: detected capacity change from 0 to 4
[ 2322.849770][T24812] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2322.859419][T24812] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d0000ff"})

09:43:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d0000ff"})

09:43:51 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x9})

09:43:51 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000004c0)='\x00')
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/179, 0xb3}, {&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000200)=""/199, 0xc7}], 0x3, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
read(r3, &(0x7f00000003c0)=""/253, 0xfd)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:51 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf6ffffff, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000011000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2323.387883][T24848] loop3: detected capacity change from 0 to 4
[ 2323.403431][T24849] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2323.415146][T24853] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2323.423554][T24853] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:51 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0xa})

09:43:51 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf8010000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2323.427913][T24848] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2323.443909][T24848] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2323.448112][T24853] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2323.461602][T24853] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2323.519340][T24848] loop3: detected capacity change from 0 to 4
[ 2323.527340][T24848] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2323.527271][T24866] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2323.543515][T24873] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2323.547149][T24848] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:51 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0xb})

[ 2323.551981][T24873] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000012000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2323.592221][T24873] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2323.600633][T24873] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2323.604803][T24879] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:51 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfeffffff, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2323.659912][T24886] loop3: detected capacity change from 0 to 4
[ 2323.674210][T24886] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2323.683658][T24886] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2323.683937][T24890] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:51 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0xc})

[ 2323.701363][T24890] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2323.723462][T24890] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2323.731844][T24890] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2323.750544][T24886] loop3: detected capacity change from 0 to 4
09:43:51 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d0000fd"})

[ 2323.785213][T24886] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2323.797991][T24900] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2323.798127][T24886] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d0000fd"})

09:43:51 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xff070000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:51 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0xd})

09:43:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000020000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:51 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80}, 0x2000, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f0000001440)=[{&(0x7f0000000100)="be5ded65da0ae951329bd2b8087e5cdd45835642c4725b85fab2d2f440308f5aab7dbaa907b7904a1d8ebc18347f8e856fde757bfaa7c15d84c14ac739b4bf84d82469ac6b32a12f8ea60872f8d70763cfb1c84b52168faa3b093b7c79c9be37312f73d0b0f23d", 0x67}, {&(0x7f0000000380)="0135ecf7aa795bf003c524466b031360e9dea89123c2d61612e9e39b1b4e03c06aa0989aca536bbca85312683f15d6057f6bf4ce5f3539bf3bb9dd4746689509af79c76d76b022b2afed91f4444e4090165cdfa253edc7f0e87f2a3113a43b9d1b4c8749698eb124f4e03369d0f626f0543ed73634e1e981b2ce65df05e62ce03d4eb57adbf1d7db0a15c00a9e76e615e815c8827c2966e9a723c02fff9eaf5898c00c0bf04143ecf129a2b7da1e99682a5e25e5b1644b5984863a0218cb257d3a58af7b9697598646b8c66ff99c5909fba88074c235aa2163d7864512ba9fdabb721b9b19afb8a6d203bb328ee501e36391d1f8eaaff64bab0bbc30fff3351fff831efc09d6089c6fb44e177211fb4d20d6f41bdd0d34fbc9315365667eaa3f959d900ec115b714bb36a557af1cc902c41c07b7b9e690f2f980755bed12a574f75750eaa6b861432882a016917bd828df8d48ce0b1c8b20aaa312dff3a1acd96df4021edddfc3a5df467905173ec367c5dd05ba14bcf5c73f8abb462281e306ca943032338d75a3f2de7d8b382d99ac10230a8f60c986a0ed443516bef05df75f7927a8bb98c849f2afb2e349cb015f55700f34d94de042d4004f69e214792fac4b674576b8c633448297983e9ca19d3f69d2af57d35987fe635eb16d980a72b40d0bf90d082ea8a97d827da15909034279d00800f4b9a1f8059f8eeb97635dc1a814273baf2151d0a5bd8f254024c579ab01d8a5108d99e78d430b2fa79189d390b56997d7b4f5584df29e2c9f336ac36ec2fabb2c48594349dcadcaa7f3d06693cdd0030bfc209c3589b0d766db64ac2886c4bb56aa9ec5763197fdf4b0d95dcc84f347660c8ee5ceea7de3070295b7158525e1b3f6d68ec3e294541afe2d085d78cf0e7f799e1b51f3fb5bf8866372bf638f676c4cb05ccf26c4f3ce364825d890813f827c358d7e397965ff8073533f1b7a968289b0c91ce0c68884681cacddba78c28b71d42307691f5f0804cd6e83819b27603a7801aa619c7f6a7cdeebf4e4aea02fae649cbf6dfd2753aef2877d90882374f1d5cc69ad821c51b1a2c34f84c04943e0abcb9abc7aad84ff8dbbe68ec58b8709a6d70aa7d65a4bbd5e1e28269770fe97d451adfc3da789b08d325405789e41f818cddf920558cc7aeedcde09dba973d31b5cff7c6a92cb8b5661378cb880f956a82b596689a40d86dbe7ca258f9bc4f21953138da3a9f842d1b052e862007c61d5bf393450fc8e4698324824463b98c7b20c331b91b01d1dc3490f1531b69e71721e91ace00d016d7dbac3aa0948c8b07533fde6b73fcbf616d56ea69b9dcaa226d9a05d2c1b11d9ee67565ef959592768f74321f8044beb2df9b198ce35b853b15fdf4d8ca0420fce629fb6b4289c032c567e359ac918168d01f684447726cf9ba8d2d62ced854b0e6bae264c20ecbee4857f4df64e1db00713d2835e0e2a86b4ab1a039f8e27b4abd8232b057e51ba4e296fa3e672fbe9fcc8f1d87e6bca869638af5f69d6b1fb659b3e4d1380cceaa195505d345e61cfbd68ace709cf6315cb20fc8d6702f5284cff765ec867a24b274de8e88bc9c8d3ff86e8a3caa0295dd9a6961fbd4a3b82156165bb7f39b571b923b2d760ef30f80a07f442e07384f10bfbe8e1e538a4ee845717e0193cb2bf0ea7a8418447e96519a64087655ff36776eb6495e3acf0a454e35a61ee01aa5988f5c31e41341ea69004ec7b3fac502fb62cd9d876130379f38b7181a64eae566f0252daa98427a5828ec62e1d21754d60fb7c422868ff613b659277c4c6f35c5d19e14b3b2c6ef89f4e8729bccea99c87006645d57bb63a5de5cd4b46ea80ffa9bb153962a892f5232f5abe5266b8c9bbf88b0b2250eedad5f1ac9f78ad192e2355a5ad87bd84a383e22bc7718772a2b70b43d379851004930ced6d314daf0ee066dd763beb0183e4328e3bea4f71482331f5bf42d78727f128ac8013c938feae87a3d3c646fbc8b56966de5ac131ce3f99b5b8302d6a1fd5e911d0ec53469f4e0a785373b0c4fb50bbe3cf6013935bea670d31e692cdc44de3cbd0232a520dba8a78073edbeec155a6cbbc626a638019c129131bcf7ab7d9d92833b7d774023cea476b899331c6c303a1a23745c0207400af32e7abf1a4604538cf77e6d2ea805de23482f45f1637aa0c2d158e691a36fe770e674d055c60f5ac808215f61294ca225e4a2167e4340e7d9c80fe3e315e8809a1d9a5b76157c2e50fe7ef69e4203a2e25d53b667cdccb76f0169f7db5d7f52bd29a0c09930f320977e75d455627365839219736181766904b7c5bd364bafa6a7c0462a0ad5b075e94b93c0abf7292d5db313ec084efe3012aebde4fce365ee70da978416063f3b7795e27acd2638ff6e91792fc278782d11b9f4f6912c04a98df5569d910fbc61aac37025ebaa8d34f99fbaf66cd4a358796714c872cb451a936527a5e0322bb614bf617dc1da3cb998a034cc785becd1c08a63bc980fe24cb2da32d82b51ddae4bbdfe904cec81d423479d0110a4ba0cd9e2f6a4d48d5e5f2c5e17299b3f9910bfa2fbfe7f10ff91cb84285f496604c70eb2dd345ad3e6da299724d9b5b70a58f23eb2f54ae33b062b326004b3aef1ef003305d3dcae09d7c578ed59ca2e26e433ab70afcdbcfb84167fe0804a8e1975bc54690facd578d7c2eb5d7d193fee4b1d636fc5b7d1fcf33cd249757c3ddb6c6b1fa7105c6b7fd9df82b201995769c8279d8040c7223dc0c6ecb2e1cc5438fba2801d0c963dea7626f6f2796903374f002684f5d49789dc1d3cb57ecbe43890204fca84b81ec9e92917082d658f5f7b59b60a94b36b45725707c4d42136d8999bc0c27e51bb65984c9b76e6b9d6fcf9d085cedda178a76783fde6829d27101a945ce7244ee35d64e28c646945eee1770f0c8817708d24eed31a1cf33ee59c44e6d64924001b3390d3887bd3ccd6f898027c3a2d5819786d92b2da3145e5f1248c668ab50c9aee2e24a5e17a5ab7f27ed68e90247bd28c2d1ff4bedebd44def9c58c9202432d947c7a8b40465649e8e17dedb3da38e987aecc6501cbc05a17b8032d4752db90529710d72dcf8af85c2c5aea064562600e6237333929cf561ec8c991955bae3684faea67ad4c22bf74c06a2864727f09937e18307a540adf6c3c06c5e3cb31744e31ac6356b0448c6a11dbc400667be14c17ac3d03106c63bf722a079b07781959b65cee8beaea6072402f7e3b9fa49aaac439b5bb495f32040ea3d58c5009a622355cea8b77824998bade0482c2dedc1846f4ad72d13df9375ade23d4fae2c597b843facffd356a9bb10448540b0e3cc4cc311844f43fa9b8c9226628d22d3a663b37c59af59323843cd28b06c7a18e6f1175c1a6f22f14c4dc61cd3374a1da31a88b271e4a0e46658e9cb18b111342cf6ff092ea89ac5b10e7a45b121eae2fc3b135e14eb782dab319f6c612823606968dc970ebe17e7cd76c5f50bdd2e36c37d3db248d0357f63a42644a31531899ca9b6adaf7f7da3c353124d3381147f7e1565965bd8383e91a79af768bab9d3e777b03f5d8d2fe2fe8c53182e46cc1fbcb2baa6e4e9c67c63bd70fba586239b5da10930fd0483f135c14d04c8ac1cd8f10c1cb2c2f144c9681043528db60f793823f721259476bbae9b90aa8894ae198c5416e0ccae8509d749110e8b888662837eeb018def1241df43771c6c6b5c663d51167b7fefedb2ca3995ee143da5ad491fa391e58282ca33e2899b9af55bb0ef3419dda2afcd1108bc3e8e9e4a3f1c6c904c2a82a5d3faa9b4c64e5e58b2c46d392e87c76a760a4f31363ee886a28268d5674102284ad73ff4f70817b2f2d2434cb23aaeb469970fbadeaff8539b56f9957c889f33a4826efffdef64c8470ad063516bb214e41b32db31ed8ad610acf96adcb6b318dedaba12da6e6c9673bffd5885221c553cb4a4c33bf37c846dcd05df25ee3880de2869f0578a5060698bea0c478305bf307b3e3c64d44bf09db610d2902358029f3a8d297da28e41ce535c52e92d8d2adc3c5dcc57d1b0f052c2db0618e612d375c000f9ea8abe030a1bfde94dd3bf3b951965e13b5bd566b5061380ec713015e30df3b477edb414d708d19fed4b495da71b56e1c3d1c8c7e31d355f7ff10ab68f6186b69f7bde4c779998f1cff82a56fb7db5baf94c8f0e3c7f11314bb3d70a651196e15899cb0a5a49e61b52c0f05b5a831b0c1ca87592cbd8c35aa8cdaad1a5b5e4d6d7b1e643703e718247ee6d40180adb57cb16a176fd7300d06d80144dd9952aac20e20e74b80de80dc8f0a12b45890b597e3b9790f7dd27d9ef93e1333d092a6ab946d1abbb304a42926dbe6eff42cc8f34fb9f82e90635a1baf6028363f3ce508a9755606f1bcb7569ebfc904131e22720e65c4815b5cb0c9247babc0cdac9b1e485187d0f0e7495acfcd0d950d87e71f59010e19e68bc071a4bd8432dcbdbb2e60308f23fa7122f33af6375df4b1e370704a3c48d102bc8c113e0bf1955b7e68b4c6577e16f724b3f4b9f8fbf66ab97c42b0464aefb1883f25ce73d97dac02dd666b8eb7579d027adcba3c5bd304b2cd06cd770b8a46989ad374372268e65a4a8b79dd142ba0ddc384b7d78e2ae72226475fc2660ddcfbeacca94403ac2bfa1a6296f533a6aad2f5835ea8a5729c761ea0869b1f720e24f4eca18ec03847d036296ee89623a2ada149e484bca4dc40919b1996d02b4c5c7ca32a163f06d42c97f98c4e78cba6a870c6c0ae69e95ceff3e146e660d6986a72c1c03da6afb44bc968d7cd007130e502fae9cf670b19e04a4610a854a14ee9a83e57dae01b9c8d5fb45f07a6d8974048a200a08be6c08408731f4a5a84f79a3528bb102af6d749cda96467117e96315f54e3dbcfc77210eb83c3cb73abc758a32511f1450c0609522832e0e7face46557b2987d57fdbcfb88accd6ef188fabc99dde086d3b1e5c2198581af788a4456d4f795ea8e7c6f2875717f80ee78198ccd43010cda6965129e42c273bff8ce9eb7d6218fbdf07cb9ee3538abd24c9cf8e32f40509cee0a20fbb513c4fbdd3c35103f26726f1e919aabd729b9612595d3a8bf6fee00af239bbb00f50aac74360db53873ba6ecbc50de0200ec15a8d8ad80721b9e47cc942efe24c892673f5764e98cd4848647654c2f82d1d73ad2fedfee410e2da009b1b574a760dc5b69456800741537df1cd48fcd09ac7d980a22b2ffb8da36efc8dbc92d7dc9163c174c5e28e4e1bf3349294958236de5b27e2f6f55daf0a4a97c5280694d0b94bc6af512287022a6fedce3155253265cd763cb3feb02ff6c54933b0a2ff909f0c1504b82d6bfd52c0d1f2e8ecc7bd490fbfa452056ab4b7af404563fb75dae860ef60c459d86dd3c17385012a3da2a6716ed77cc1fb9f14b96a7e1e531fa621ad25a2744ac386f4fe80e81adb8cd226cc686466ea6d53b24c01d5c33a5148a86c736e02ce1e2538529d73d18711b72655e77b32e3d84978ae7d2e6d6b374f74492c08bde30df1ac110e442a2cf84cfe80475544c519b0ba4bcde279b759e6b680aed809019c2c5bac28c4a43409e4e310797b5b21b3a9a543eb3397c89594825494ea29379b06744104cb8dfba746429ecc471cf1ff922986ee784f2b22ff07e66e353325a4f9a67afb36c9cd689e560460b449d40705b12b28b5a42c9b15add257eb413e1ebb38b532517337d3f336475c8ea70ab81d00022d458ec2830d2e60f922ba4853a771b3266254", 0x1000, 0x5}, {&(0x7f0000000180), 0x0, 0x9}, {&(0x7f00000001c0)="d41b23ad6bb1261d533dd473941c6bb6267aa600ec141236205f0e27a40cc7af65aa34600e819f56acbb3be1023e40c971fe38abd0c997e48dfbd0121f3212bb028570cad32be64eb61aeabaf9d9369ef9e85ba170fa4796c801a0124e424900186425e20c11f95d848b54044023296a5e7c248e83a018a644abb2c10c1b5c5c4b", 0x81, 0x4}, {&(0x7f0000001380)="b08911592663140fb14177e9a356dce21fc3305955ebf10b46bb7048306db6944396b4bf47da8dfd433b47584073b5155b34173587d4a615168d144375640c98b63550165a82a2f971b275c763ef2d75821b3ccbc22a3542eee44b146557f8bb22713659d4103495c2da11f962695643ef1817f85df209784f68e8ebf1fc58d26e8772f9", 0x84, 0x80}, {&(0x7f0000002200)="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", 0x1000, 0x2f0}, {&(0x7f0000000280)="274b074f784f3681390aebb875c387ed8548557863ac6b086de3049c99cf8c5fabb653d15a", 0x25, 0x200}, {&(0x7f00000002c0)="c0520db729063c4f6a84d0a2549dc10462ee8f616f8c8fa93434b2853eed302eb99b04cf421f07c1782f1d321322d7", 0x2f, 0x9}], 0x11000, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"])
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x408002, 0x0)
r5 = openat(r4, &(0x7f0000000000)='./file0\x00', 0x20000, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff00)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x18000, 0xb9ca48a6f97158f4)
fchownat(r1, &(0x7f00000015c0)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x1000)
ioctl$SG_IO(0xffffffffffffffff, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2324.259042][T24924] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2324.267431][T24924] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:51 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffff7f, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2324.299267][T24924] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2324.307651][T24924] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2324.326013][T24933] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2324.332959][T24935] loop3: detected capacity change from 0 to 4
09:43:52 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000080))
openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x111000, 0x149, 0xc}, 0x18)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @scatter={0x5, 0x0, &(0x7f0000001580)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000200)=""/132, 0x84}, {&(0x7f0000001380)=""/234, 0xea}, {&(0x7f0000001480)=""/215, 0xd7}, {&(0x7f0000000180)=""/24, 0x18}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:52 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0xe})

[ 2324.346251][T24935] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2324.365380][T24945] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2324.366927][T24935] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2324.373895][T24945] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2324.399506][T24935] loop3: detected capacity change from 0 to 4
[ 2324.407290][T24935] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2324.426641][T24935] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:52 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffff8c, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:52 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0), 0xffff, 0x100)
preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0)
fcntl$setflags(r4, 0x2, 0x0)
fallocate(r4, 0x44, 0xff, 0x200)

09:43:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f001020000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2324.442095][T24945] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2324.450511][T24945] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2324.452794][T24957] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2324.505150][T24964] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2324.513561][T24964] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2324.531029][T24964] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2324.539431][T24964] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2324.548483][T24971] loop3: detected capacity change from 0 to 4
[ 2324.574521][T24971] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2324.583914][T24971] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2324.617810][T24971] loop3: detected capacity change from 0 to 4
[ 2324.624254][T24971] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2324.633819][T24971] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:52 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:52 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:52 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffff6, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:52 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0xf})

09:43:52 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="446644fa41804e46acf1ac03fdab1e32563904f35c1af470fe3d00cf2b5a1c611b7fe15612b97023088a14d1754cdc566aab7505e48117374821f28b22038dad649d10a0b0ec1c1109facadae21aa848544555da8875a9ce9df83615ec51a2bc20d1eb30828d1c592df8cf7f153118b73408dc87eac948f73ac1c8529c9ce1bfa83c319de496716c511b55ea7dcfdd728226bb2478c7b9deb2a7ff82273dd6ce0f86c9", 0xa3}, {&(0x7f0000000540)="5b8d64e23d4b5a8e8cf17eb9fdebb465dff66c2a802908656f1e2472851ade6045ce04048a242ae847e482acec4066162a319531ea84244b13dc8801faf130c586f18e2e3a362df3d1c7559605c1c9", 0x4f}], 0x2, 0x2)
mmap(&(0x7f0000515000/0x3000)=nil, 0x3000, 0x180000b, 0x12, r0, 0xd69f0000)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000440)={0xa7b, 0x0, '\x00', 0x1, &(0x7f0000000400)})
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xffffffffffffffff, 0xac, 0x0, @buffer={0x0, 0x82, &(0x7f0000000080)=""/130}, &(0x7f0000000140)="f6a041ab71636d77c13fe77b10cc6bcbb68fca5c7515b34c72dddcde9f6f4e64e9834134cd24f1ec16f593e20ab4d128d92f43e2ea7641bddfe06088070a80c42452cdb95d4c4885c0b4bfc85fbf27513e77dc80c2b8e2efb6947e8c4eda86a61883d06efe33a7749cff28928785bbd5a1c75039d12b42e25e14babc6b4004f68febff3342d09f8a1cf003d05b83c2aae06c5bb37b44462d7cfd5af5721e43cb75c70f0e218b7251168c9af1", &(0x7f0000000200)=""/145, 0x5, 0x22, 0x3, &(0x7f00000002c0)})
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000022000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2325.154443][T24999] loop3: detected capacity change from 0 to 4
[ 2325.165406][T24999] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2325.182257][    C0] sd 0:0:1:0: [sg0] tag#7775 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2325.185585][T24999] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2325.192701][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB: opcode=0xf6 (vendor)
[ 2325.192721][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[00]: f6 a0 41 ab 71 63 6d 77 c1 3f e7 7b 10 cc 6b cb
[ 2325.192738][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[10]: b6 8f ca 5c 75 15 b3 4c 72 dd dc de 9f 6f 4e 64
[ 2325.192761][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[20]: e9 83 41 34 cd 24 f1 ec 16 f5 93 e2 0a b4 d1 28
[ 2325.192778][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[30]: d9 2f 43 e2 ea 76 41 bd df e0 60 88 07 0a 80 c4
[ 2325.223291][T25004] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2325.228059][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[40]: 24 52 cd b9 5d 4c 48 85 c0 b4 bf c8 5f bf 27 51
[ 2325.240516][T25006] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2325.247163][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[50]: 3e 77 dc 80 c2 b8 e2 ef b6 94 7e 8c 4e da 86 a6
[ 2325.253676][T25006] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2325.263238][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[60]: 18 83 d0 6e fe 33 a7 74 9c ff 28 92 87 85 bb d5
[ 2325.301746][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[70]: a1 c7 50 39 d1 2b 42 e2 5e 14 ba bc 6b 40 04 f6
[ 2325.311406][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[80]: 8f eb ff 33 42 d0 9f 8a 1c f0 03 d0 5b 83 c2 aa
[ 2325.320973][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[90]: e0 6c 5b b3 7b 44 46 2d 7c fd 5a f5 72 1e 43 cb
[ 2325.330526][    C0] sd 0:0:1:0: [sg0] tag#7775 CDB[a0]: 75 c7 0f 0e 21 8b 72 51 16 8c 9a f1
[ 2325.343540][T25006] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2325.343621][    C0] sd 0:0:1:0: [sg0] tag#7776 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2325.351963][T25006] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2325.362367][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB: opcode=0xf6 (vendor)
[ 2325.380218][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[00]: f6 a0 41 ab 71 63 6d 77 c1 3f e7 7b 10 cc 6b cb
[ 2325.389902][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[10]: b6 8f ca 5c 75 15 b3 4c 72 dd dc de 9f 6f 4e 64
[ 2325.399645][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[20]: e9 83 41 34 cd 24 f1 ec 16 f5 93 e2 0a b4 d1 28
[ 2325.409182][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[30]: d9 2f 43 e2 ea 76 41 bd df e0 60 88 07 0a 80 c4
[ 2325.418851][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[40]: 24 52 cd b9 5d 4c 48 85 c0 b4 bf c8 5f bf 27 51
[ 2325.428456][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[50]: 3e 77 dc 80 c2 b8 e2 ef b6 94 7e 8c 4e da 86 a6
[ 2325.438019][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[60]: 18 83 d0 6e fe 33 a7 74 9c ff 28 92 87 85 bb d5
09:43:53 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ecc9a3baa67cb59b016f81caa9cc85ba2478d630322dc9ef954ec277d879bbf88e10248f9c621bd914fa42fdf31b6551467098dbdece80914ca419137a8efe34e861a6a08dda9a3d35722d5c1f8854642d237fd8b4dbe6160ca9a7077f7597980187b667af5123eaf2db7ebf7c9df463ed1a90d47f14fbf9502ed892204c7a68ce11b553c5454069ca8a3a366aa96294998a4954ccf7ca53a95100832608", 0x9e}], 0x1, 0x4)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:53 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2325.449813][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[70]: a1 c7 50 39 d1 2b 42 e2 5e 14 ba bc 6b 40 04 f6
[ 2325.459720][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[80]: 8f eb ff 33 42 d0 9f 8a 1c f0 03 d0 5b 83 c2 aa
[ 2325.469296][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[90]: e0 6c 5b b3 7b 44 46 2d 7c fd 5a f5 72 1e 43 cb
[ 2325.478938][    C0] sd 0:0:1:0: [sg0] tag#7776 CDB[a0]: 75 c7 0f 0e 21 8b 72 51 16 8c 9a f1
09:43:53 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x10})

09:43:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

[ 2325.520966][T24999] loop3: detected capacity change from 0 to 4
[ 2325.528478][T24999] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2325.554639][T24999] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:53 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000001380)={0x0, 0xfffffffffffffffe, 0x1000, 0x40, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/218, 0xda}, {&(0x7f00000001c0)=""/120, 0x78}]}, &(0x7f0000000380)="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", &(0x7f0000000280)=""/58, 0x2, 0x22, 0x2, &(0x7f00000002c0)})

[ 2325.578440][T25029] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2325.586818][T25029] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2325.611018][T25029] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000025000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:53 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x200000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2325.619453][T25029] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2325.621999][T25036] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2325.666486][T25047] loop3: detected capacity change from 0 to 4
[ 2325.679128][T25047] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2325.688986][T25047] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2325.707505][T25036] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2325.721310][T25054] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2325.729785][T25054] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2325.743124][T25047] loop3: detected capacity change from 0 to 4
[ 2325.750312][T25047] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2325.760358][T25047] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2325.760869][T25054] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2325.778117][T25054] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:53 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:53 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x94080, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x4a31f, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x7, r0, 0x11)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:53 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x11})

09:43:53 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00002e000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2326.017117][T25076] loop3: detected capacity change from 0 to 4
[ 2326.023948][T25075] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2326.032308][T25075] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2326.049676][T25076] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:53 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x10000000)
close_range(r1, r0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x18052, 0x1fffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:53 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000001000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:53 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x12})

[ 2326.068121][T25075] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2326.074018][T25078] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2326.076580][T25075] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2326.084297][T25076] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2326.166656][T25097] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2326.169327][T25076] loop3: detected capacity change from 0 to 4
[ 2326.179959][T25095] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2326.179998][T25076] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2326.188348][T25095] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2326.208899][T25076] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2326.217261][T25095] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2326.226549][T25095] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:54 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x2, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000001c0)={0x3, 0x7})
r6 = dup2(r2, r2)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @random="6b6d78a7e510"}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x4, 0x8, 0x3, 0x2, 0x2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0xa}, 0x80, 0x40, 0x3, 0x3}})
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r7, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:54 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x22})

09:43:54 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2326.495285][T25119] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2326.503354][T25121] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2326.503478][    C1] sd 0:0:1:0: [sg0] tag#7777 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2326.511737][T25121] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2326.522093][    C1] sd 0:0:1:0: [sg0] tag#7777 CDB: opcode=0xe5 (vendor)
[ 2326.539958][    C1] sd 0:0:1:0: [sg0] tag#7777 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2326.549646][    C1] sd 0:0:1:0: [sg0] tag#7777 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2326.559215][    C1] sd 0:0:1:0: [sg0] tag#7777 CDB[20]: ba
[ 2326.568726][T25121] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2326.573443][    C1] sd 0:0:1:0: [sg0] tag#7778 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2326.577197][T25121] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2326.587559][    C1] sd 0:0:1:0: [sg0] tag#7778 CDB: opcode=0xe5 (vendor)
[ 2326.587580][    C1] sd 0:0:1:0: [sg0] tag#7778 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2326.614955][    C1] sd 0:0:1:0: [sg0] tag#7778 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2326.624508][    C1] sd 0:0:1:0: [sg0] tag#7778 CDB[20]: ba
09:43:54 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:54 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00003f000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:54 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2100000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:54 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x25})

09:43:54 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
pread64(r0, &(0x7f0000000080)=""/247, 0xf7, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mmap(&(0x7f000047b000/0xa000)=nil, 0xa000, 0x2000004, 0x110, r1, 0x56922000)
mmap(&(0x7f00005b9000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x9f9f9000)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2326.926549][T25141] loop3: detected capacity change from 0 to 4
[ 2326.933606][T25142] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2326.942030][T25142] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2326.943312][T25141] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2326.962151][T25145] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:54 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:54 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2326.970625][T25142] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2326.979120][T25142] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2326.980962][T25141] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:54 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x48})

[ 2327.039708][T25141] loop3: detected capacity change from 0 to 4
[ 2327.049348][T25141] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2327.072880][T25164] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2327.079488][T25168] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2327.079504][T25168] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2327.084279][T25141] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2327.115007][T25168] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2327.123394][T25168] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1ff, 0x9, 0x0, 0x1ac2, 0x9, "2664cc938a827906ee88986b82b641c89ee35c"})
ioctl$VT_WAITACTIVE(r1, 0x5607)

09:43:54 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYRES64=r0], 0x28}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}}, 0x800)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
utimensat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', &(0x7f00000008c0), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r1, &(0x7f0000000900)=[{&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/123, 0x7b}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000000700)=""/193, 0xc1}, {&(0x7f0000000a00)=""/227, 0xe3}], 0x8, 0x2, 0x6)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000980))
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000487000/0x2000)=nil, 0x2000, 0x5000000, 0x4000010, r5, 0x40126000)
ioctl$SG_IO(r4, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:54 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x4c})

09:43:54 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2327.339261][T25181] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2327.347688][T25181] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2327.352514][T25185] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2327.369759][T25181] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2327.372646][    C0] sd 0:0:1:0: [sg0] tag#7779 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2327.378134][T25181] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2327.388502][    C0] sd 0:0:1:0: [sg0] tag#7779 CDB: opcode=0xe5 (vendor)
[ 2327.388522][    C0] sd 0:0:1:0: [sg0] tag#7779 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2327.415929][    C0] sd 0:0:1:0: [sg0] tag#7779 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2327.425546][    C0] sd 0:0:1:0: [sg0] tag#7779 CDB[20]: ba
[ 2327.442350][    C1] sd 0:0:1:0: [sg0] tag#7780 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2327.452715][    C1] sd 0:0:1:0: [sg0] tag#7780 CDB: opcode=0xe5 (vendor)
[ 2327.459569][    C1] sd 0:0:1:0: [sg0] tag#7780 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2327.469163][    C1] sd 0:0:1:0: [sg0] tag#7780 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2327.478726][    C1] sd 0:0:1:0: [sg0] tag#7780 CDB[20]: ba
09:43:55 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x709401, 0x0)
ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140))
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
syz_open_pts(r0, 0x412000)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000040000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:55 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x540000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:55 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x60})

09:43:55 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4d126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/165, 0xa5}, {&(0x7f0000000140)=""/191, 0xbf}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000240)=""/122, 0x7a}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000540)=""/187, 0xbb}], 0x7, 0x1, 0x7fff)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2327.802312][T25205] loop3: detected capacity change from 0 to 4
[ 2327.813779][T25205] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2327.824708][T25209] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2327.832230][T25205] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:55 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r3, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r4, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
write$binfmt_misc(r4, &(0x7f0000000180)={'syz0', "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"}, 0x133)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:55 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x68})

[ 2327.833102][T25209] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2327.853248][T25210] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2327.866028][T25209] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2327.874449][T25209] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2327.887125][T25205] loop3: detected capacity change from 0 to 4
[ 2327.893630][T25205] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:55 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x550000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2327.928594][T25205] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2327.962692][T25230] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2327.965660][T25227] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2327.971085][T25230] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2327.999829][T25230] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2328.008206][T25230] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0xbadb, 0x5, 0x81, 0x1, 0x2, "1c979809da1ff0f9"})
r1 = syz_open_pts(r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000245000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:55 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xff, 0x7f, 0x1, 0x40, 0x0, 0x0, 0x42200, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x100000001, 0x10001}, 0x1008, 0x2843d4b2, 0x3, 0x1, 0x3660, 0xfffffee0, 0x101, 0x0, 0x85a, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x80000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x8, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:55 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x6c})

[ 2328.285904][T25250] loop3: detected capacity change from 0 to 4
[ 2328.300188][T25250] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2328.323601][T25255] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2328.330398][T25250] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2328.367122][T25250] loop3: detected capacity change from 0 to 4
[ 2328.376729][T25250] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2328.386032][T25250] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x5, 0x4, 0x80000001, 0x5, 0x1, "43f70da2edbe348c8cf67b59b5ffee873f4513", 0x0, 0x2})
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000140)="6df23db2dc3894f40e5471ad0a03d84ebe5cb1077c95544da0c0cf1809929d7138e539e53a37ad27a40c22f34472a31e609da311b4600234f3fa98b212e493934bfc1577b26ff78cae4b5c599849667092c00d2c55e59ee90490577818429e6fc63aa94c80f9e45714ebe10946bc0ee168e26f06d5e7c1861df7cb255464e7f7c37b29d72cb84c6b3a6391b01a5ba339dfa26778fe16211dfa2fa8961cedde4f491fdbed")
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r2, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/120, 0x78}], 0x1, &(0x7f0000000540)=""/233, 0xe9}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000380)=""/19, 0x13}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r3 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000200))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x4000000000edb9)
ioctl$TCSETA(r5, 0x5406, &(0x7f0000000340)={0x1, 0x100, 0xfff, 0xa0, 0x5, "580f0014e4d6750f"})

09:43:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x100, 0x0, 0x0, 0xfffffffe, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x400000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x4000000000edb9)
ioctl$TIOCSCTTY(r3, 0x540e, 0x6)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r4, 0x0, 0x4000000000edb9)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/181})
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x1, 0xfc, 0x764, 0x0, 0x5, "db148854028781072151527d794965ab8121d9", 0x9, 0x945})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:56 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x570000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:56 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffa]}, 0x8)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x3, 0xd, 0x4, 0x445f, "5f88878c04d75a24993874c988330f68903afa49ee41b168c1a0181e27d5300f"})

09:43:56 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x74})

09:43:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000048000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2328.680360][T25281] loop3: detected capacity change from 0 to 4
[ 2328.681197][T25280] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2328.701916][T25283] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2328.710369][T25283] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2328.714908][T25281] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:56 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0x7a})

[ 2328.732591][T25283] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2328.733490][T25281] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2328.740967][T25283] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2328.768203][T25281] loop3: detected capacity change from 0 to 4
09:43:56 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7f6007931000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2328.774950][T25281] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2328.790307][T25281] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:56 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2328.833668][T25304] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2328.833871][T25305] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2328.848641][T25305] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2328.865912][T25305] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:43:56 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0xfe})

09:43:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00004c000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:56 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7f6007932000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2328.874322][T25305] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2328.949061][T25323] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2328.949071][T25326] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2328.949085][T25326] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2328.962085][T25322] loop3: detected capacity change from 0 to 4
[ 2328.985108][T25326] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2328.992033][T25322] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2328.993577][T25326] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2329.026705][T25322] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2329.089766][T25322] loop3: detected capacity change from 0 to 4
[ 2329.097117][T25322] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2329.106497][T25322] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:57 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
r3 = fsopen(&(0x7f0000000200)='anon_inodefs\x00', 0x1)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000340)={0x0, 0x100, [0x5d, 0x6, 0x7f, 0x0, 0x10000]})
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES16=r1, @ANYRES64, @ANYRESDEC, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r2, @ANYRES16=0x0, @ANYRES32=r1], 0xfe8d)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xf05)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:57 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f00007f6000/0x3000)=nil, 0x3000, 0x1, 0x2010, r0, 0x55127000)

09:43:57 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [], 0xff})

09:43:57 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7f6007952000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:57 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000060000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2329.576697][T25357] loop3: detected capacity change from 0 to 4
[ 2329.583457][T25358] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2329.588096][T25360] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2329.591853][T25358] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2329.611181][T25357] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:57 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7f6007b52000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:57 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2329.620760][T25357] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:57 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7200000000000000080000f200000900"])

[ 2329.657743][T25357] loop3: detected capacity change from 0 to 4
[ 2329.670597][T25357] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2329.690443][T25380] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:57 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
set_mempolicy(0x4000, &(0x7f0000000100)=0x8001, 0x2)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[], [{@permit_directio}, {@appraise_type}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@seclabel}, {@hash}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x2, 0x40, 0x1, 0x29}, {0x4, 0x7f, 0x2, 0x1be6}, {0x8, 0x6, 0x52, 0x7}, {0x3, 0x8, 0x80, 0x101}, {0x6, 0xff, 0x80, 0x100}, {0xb3, 0x40, 0x1, 0x18c0}, {0x0, 0x7, 0x1, 0x23}]})

[ 2329.700902][T25357] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2329.711247][T25384] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2329.719724][T25384] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:57 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000068000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:57 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7f6007d52000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2329.749979][T25384] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2329.758360][T25384] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2329.766979][T25393] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2329.809914][T25400] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2329.812138][T25399] loop3: detected capacity change from 0 to 4
[ 2329.818334][T25400] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2329.843712][T25399] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2329.860305][T25405] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2329.867259][T25399] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2329.917932][T25399] loop3: detected capacity change from 0 to 4
[ 2329.925572][T25399] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2329.937087][T25399] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:58 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x248003, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x3a2, 0x0, 0x0, 0x0, 0x0, "86974bfb12cbcf7cf2b0c8bdb71f00"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0x200, 0x0, 0x8, 0xb, "2f84836666daaea62efc9194ecccb8d8452565"})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

09:43:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000))
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:58 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2e, 0xb, 0x1, {0x8, @esp_ip4_spec={@multicast2, @empty, 0x8, 0x81}, {0x0, @random="8d35261d41fa", 0x2, 0x4, [0xfff, 0x80000001]}, @ah_ip6_spec={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x9}, {0x0, @local, 0x20, 0x27, [0xc59, 0x1020000]}, 0x9, 0xfffffffa}, 0x3, [0x8000, 0x1, 0x7f]}})
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:58 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7f6007f52000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:58 executing program 4:
set_mempolicy(0x3, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1000, &(0x7f0000000180))
openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x20080, 0x2)
r0 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, 0x6, &(0x7f0000000440)=[{&(0x7f0000000100)="f71f3db4389db1a7962507c3340781b0e09d51dbdffe4e014b6896f80195009edd2a9ecb5c6389b71b8084029e6d564e26f8abf0e7bff3dfdb3942556cce2f656a9231bad651", 0x46, 0x6}, {&(0x7f00000001c0)="c8d2f5a7fb8a0e", 0x7, 0x7}, {&(0x7f0000000200)="dfbcfadbddc11588f2db31bb8092e73570a8d19da2df90c1470e6e368093ddb9c41d68028fa8c1110fafd5c6a454a0bf1f691df79597c967b559f695837e6e21fe83d95222ee6f29a00040363f6fb53191bffe8b217deda7f004c39405307e6daba3ce4a967c9c37df8765c56ac7f0e811643887693cad21bed75a4c7eabbade07fd0067452e416813958bf786839b52169ab45611d3258dcfdd042974c0d0013377af3a6a4534083ef6c3ec961aca78d4f3aced7c0515630735b21a16e9bc5bb5fc32acbb26364db3c8ecc7a972dc96b7f322458832b794d88b26eb7fc9a8477e90cd29bd7c71483c9c59665fa1d1099fa70b3303", 0xf5, 0x73db36da}, {&(0x7f0000000300)="675ffc7c05297a0813c07d3511040a0f548a77f46c341e719b5ad83828467d78c62fa9d38b6f7c1d939a8ef3258e4ca2257b86b8436b963b5e7617886a0700ba7c69f576a10db51b46014ec04e0d28d73f881a4867015cefd202f2153bcdd7b77ae2a90bcadb7754f6af059b7f421ef2b74a164c9b1978cf7716b4082de93285d650743e8caff865e96b1a2fe239cec16e0a61", 0x93, 0x1f}, {&(0x7f00000003c0)="eb47812a46b32d8037843cf9460f14a02d58d54ebcd7ffbe59bce591556a5ebaac46d122f16b", 0x26, 0xcb}, {&(0x7f0000000400)="fe17af4bf2998b2f", 0x8, 0x3ff}], 0x1040804, &(0x7f0000000500)={[], [{@euid_lt={'euid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt}, {@smackfshat={'smackfshat', 0x3d, ')}'}}, {@context={'context', 0x3d, 'staff_u'}}]})
set_mempolicy(0x4000, &(0x7f00000005c0)=0x7, 0x758)
openat(r0, &(0x7f0000000580)='./file0\x00', 0x800, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x7ff, 0x7f, 0x7, 0x5}, {0x5, 0x7, 0x4, 0xef66}]})

09:43:58 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00006c000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:58 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x200, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000240)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000edb9)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x7fffffff, 0x56, 0x7fffffff, 0x7f, 0xe, "f7f1020d06105f1626bba2a36a6ce8f749d39f"})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x4000000000edb9)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x1f, 0x2, 0xf497, 0x75, 0x3, "37a948f1991f41137606d9846167da60cb8a34"})

[ 2330.496279][T25436] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2330.504828][T25436] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2330.504933][T25441] loop3: detected capacity change from 0 to 4
[ 2330.531474][T25441] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:58 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x970000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2330.531713][T25436] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2330.543779][T25441] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2330.548924][T25436] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2330.589484][T25439] loop4: detected capacity change from 0 to 195382
[ 2330.590853][T25458] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2330.604361][T25458] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2330.623364][T25441] loop3: detected capacity change from 0 to 4
09:43:58 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mmap(&(0x7f00002b9000/0x2000)=nil, 0x2000, 0x4, 0x2010, r0, 0x8ba6c000)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:43:58 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2330.637261][T25458] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2330.645610][T25458] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2330.660605][T25441] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2330.671005][T25441] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:43:58 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "ae6f2cfa527eab8372c7b29f8cbb4fb71c564730403a8a177681cf563239826ed322c3522a201d59548842bb62f25f98af8462b3914ebf4e3a8ab9d027223c7590e0849a8289194229890841d235515d818e7a1feb653c27906c426658e5ee1c81043483534f2f77984e023ed51f9dc6e6c4cd93179412ea8b25b54172e1506ff0ccd4a3bde0da9883668708e2"}, 0x91)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0)

09:43:58 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c81)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x41, 0x0, 0x4)

09:43:58 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000010000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2330.711222][T25476] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2330.719658][T25476] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2330.734522][T25476] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2330.743017][T25476] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2330.789631][T25484] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2330.807121][T25494] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2330.809206][    C0] sd 0:0:1:0: [sg0] tag#7799 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2330.815497][T25494] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2330.825870][    C0] sd 0:0:1:0: [sg0] tag#7799 CDB: opcode=0xe5 (vendor)
[ 2330.843712][    C0] sd 0:0:1:0: [sg0] tag#7799 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2330.853288][    C0] sd 0:0:1:0: [sg0] tag#7799 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2330.862846][    C0] sd 0:0:1:0: [sg0] tag#7799 CDB[20]: ba
[ 2330.872351][T25494] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2330.880820][T25494] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2330.937738][T25506] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(0xffffffffffffffff, 0x2)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x3)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000000edb9)
syz_open_pts(0xffffffffffffffff, 0x300)
connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r4, 0x0, 0x4000000000edb9)
syz_open_pts(r4, 0x101402)

09:43:59 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10400000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:59 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000272000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:59 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xb)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x4, 0x0, 0x1, 0x4, 0x2000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={&(0x7f0000000000), 0xdc1a}, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x445e443e4ae073ce, 0x29)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
fadvise64(r1, 0x1, 0x7fffffff, 0x2)
preadv(r1, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/171, 0xab}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/69, 0x45}, {&(0x7f0000000840)=""/78, 0x4e}, {&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/175, 0xaf}], 0x8, 0x1f, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/234, 0xea}, {&(0x7f00000001c0)=""/132, 0x84}], 0x2, 0xd9f, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
preadv(r4, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/81, 0x51}, {&(0x7f0000000bc0)=""/113, 0x71}, {&(0x7f0000000c40)=""/8, 0x8}], 0x3, 0x7f, 0x0)
ioctl$SG_IO(r3, 0x227f, &(0x7f0000002180)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0})
r5 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x10000000)
splice(r0, &(0x7f0000000080)=0x5, r5, &(0x7f0000000400), 0x5, 0xb)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000b00)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x7, &(0x7f0000000ac0)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x8eb6)

09:43:59 executing program 4:
prctl$PR_GET_TSC(0x19, &(0x7f0000000140))
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x6, 0x2, &(0x7f0000000100)=[{&(0x7f00000001c0)="1b0612830b0a8bfc52f2d964d4540c9d1a794967d3aac3d09fc7424ed382fdf78af35522a78d3b9c4e8499c9a7be72fda650c64dc6dc4fd5825ccb072284813a7e84b2e65c4518c75d530446ecc14cbbbc2a9eff9905504b0bcc6c812fec60fd3081ea761c893c13da50545201433c2f2d46c4f3bedfda232ca7ff2d83c1c3d2a2150238fd0b5610ec5abf1ce78526d6199db78d3960149dfa97ef2706df085d7fa1abe772d33f9fc4981772bd3be238c41381aaf1770cadd57e0e7b1458f8858e7ee6a91b8d8b6a60563520a15a11e858c2d9eef6eaa9d6db2b8fb77d0cd10ca72af5a925d770f6073717332982f441cb16c6d44a6b", 0xf6, 0xff}, {&(0x7f00000002c0)="ebe092f3dfe87190e2a7ff4b3b80244beb706f9c5eae1fb8efc0f9fa918c88f370cf4e4f79a72e9cb0c5f1de6adf5e47fdb49f361d715558f957bcdb89ef6eba97455659eaa6cc1dd4c98eaed9b16fb2d7ebe6b5a6e1d2cfc04388e2915fdb9b75f852252c21816b0b59b36ea3f633358fe6dc5027718241bacbc24574738e44d0b617fa5eb32bfbf9e492f18e9c527f935bb833ba4f4ad4e2b01d264463719eeddda9db0e32d82c", 0xa8, 0x1f}], 0x1001010, &(0x7f0000000380)={[{@unhide}, {@dmode}, {@sbsector}, {@nocompress}, {@unhide}], [{@fowner_lt}]})

09:43:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xee072af, 0xfffffffd, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000700)={0xfff, 0x8, 0xab55, 0x5, 0x10, "2170224b6a16b218"})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
readv(r0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000740)=""/259, 0x103}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000000200)=""/149, 0x95}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/245, 0xf5}], 0x8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000edb9)
mknodat$loop(r3, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x0)
syz_open_pts(r1, 0x202)

[ 2331.396504][T25529] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2331.404904][T25529] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2331.417245][T25533] loop3: detected capacity change from 0 to 4
[ 2331.417275][    C0] sd 0:0:1:0: [sg0] tag#7800 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2331.433679][    C0] sd 0:0:1:0: [sg0] tag#7800 CDB: opcode=0xe5 (vendor)
[ 2331.440580][    C0] sd 0:0:1:0: [sg0] tag#7800 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2331.447708][T25533] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2331.450160][    C0] sd 0:0:1:0: [sg0] tag#7800 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2331.468727][    C0] sd 0:0:1:0: [sg0] tag#7800 CDB[20]: ba
[ 2331.474617][T25536] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2331.482072][    C1] sd 0:0:1:0: [sg0] tag#7801 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2331.485842][T25529] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2331.492462][    C1] sd 0:0:1:0: [sg0] tag#7801 CDB: opcode=0xe5 (vendor)
[ 2331.500730][T25529] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2331.507566][    C1] sd 0:0:1:0: [sg0] tag#7801 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2331.507587][    C1] sd 0:0:1:0: [sg0] tag#7801 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2331.507602][    C1] sd 0:0:1:0: [sg0] tag#7801 CDB[20]: ba
[ 2331.514467][    C1] sd 0:0:1:0: [sg0] tag#7802 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2331.520519][T25533] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2331.528332][    C1] sd 0:0:1:0: [sg0] tag#7802 CDB: opcode=0xe5 (vendor)
[ 2331.528348][    C1] sd 0:0:1:0: [sg0] tag#7802 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2331.528385][    C1] sd 0:0:1:0: [sg0] tag#7802 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
09:43:59 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x109307607f0000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:59 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
mmap(&(0x7f000071d000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xdc1e}, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x200000}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket(0x1f, 0x6, 0x2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)

[ 2331.579927][    C0] sd 0:0:1:0: [sg0] tag#7803 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2331.589057][    C1] sd 0:0:1:0: [sg0] tag#7802 CDB[20]: ba
[ 2331.599389][    C0] sd 0:0:1:0: [sg0] tag#7803 CDB: opcode=0xe5 (vendor)
[ 2331.611854][    C0] sd 0:0:1:0: [sg0] tag#7803 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2331.621439][    C0] sd 0:0:1:0: [sg0] tag#7803 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2331.631045][    C0] sd 0:0:1:0: [sg0] tag#7803 CDB[20]: ba
09:43:59 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000074000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:59 executing program 4:
set_mempolicy(0x4000, 0x0, 0xfffffffefffffffb)
set_mempolicy(0x8000, &(0x7f0000000080)=0x101, 0x8)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))
set_mempolicy(0x1, &(0x7f00000000c0)=0xe832, 0x6)

[ 2331.701129][T25547] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2331.711656][T25557] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2331.712623][T25560] loop3: detected capacity change from 0 to 4
[ 2331.720105][T25557] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2331.737366][T25560] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:43:59 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48c0c1, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2331.747280][T25560] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2331.750439][T25557] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2331.765201][T25557] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:43:59 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x209307607f0000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2331.804388][T25560] loop3: detected capacity change from 0 to 4
[ 2331.818075][T25560] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2331.840904][T25576] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2331.848511][T25560] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2331.859966][T25582] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2331.868372][T25582] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2331.889980][T25582] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2331.898343][T25582] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2331.911318][T25587] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:43:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x1, 0x7f, 0xffff, 0x7fff, 0x17, "688c88b19ef31693a6f5085f947cdd34abbe5b"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000edb9)
syz_open_pts(r3, 0x80000)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:43:59 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000edb9)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=<r4=>0x0)
fchownat(r3, &(0x7f0000000080)='./file0\x00', r4, 0xee01, 0x400)

09:43:59 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x209507607f0000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:43:59 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00007a000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:43:59 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x5376000)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)="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", 0x1c2, 0x60d}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7264580d42c51f0f49562e9930de1131ea1000def64bc25fe9794a51110000000000003c889e67080f6c8f0ee0703140e2d94511f3c89f778c0d0000000000000003f2dc71a6d02c2f677021571468673880ae488a601aed42537ad418e70300000000000081a948ed8e7b6a0015911aa21a0000000017000006000000000000000000000000000000000002000003dc93e9f62f9a369aa093ac7939cd4b35dd81880b768f9839c9c3c6aa38536551d723be3a0700c2150700b36b883c791555566e2e8b70c0000000"])
chdir(&(0x7f0000000080)='./file0\x00')

09:43:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2ffa, 0x773f, 0x2, &(0x7f0000000140)={[0x7fff]}, 0x8)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r3 = dup2(r2, r0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x400)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x80, "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"})
syz_open_pts(r0, 0x44040)

[ 2332.327040][T25616] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2332.330745][T25614] loop3: detected capacity change from 0 to 4
[ 2332.335505][T25616] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2332.338738][T25615] loop4: detected capacity change from 0 to 264192
[ 2332.347393][T25614] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2332.354675][T25616] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:44:00 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20b507607f0000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:00 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/52, 0x34}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/186, 0xba}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000002c0)=""/6, 0x6}], 0x5, 0xff, 0xcc0a)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000400), 0x2000000000000000, 0x200)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_pts(0xffffffffffffffff, 0x480)

[ 2332.376591][T25616] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2332.379225][T25614] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2332.395789][T25615] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2332.444388][T25614] loop3: detected capacity change from 0 to 4
[ 2332.454006][T25614] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2332.463773][T25633] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2332.465257][T25614] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2332.472144][T25633] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:00 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20d507607f0000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:00 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/208, 0xd0}, {&(0x7f0000000200)=""/214, 0xfffffffffffffe0e}, {&(0x7f0000000380)=""/195, 0xffffff7d}, {&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f0000000680)=""/182, 0xb6}, {&(0x7f0000000580)=""/89, 0x59}], 0x8, 0x5, 0xffffff80)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:44:00 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00018d000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2332.503422][T25632] loop4: detected capacity change from 0 to 264192
09:44:00 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))
set_mempolicy(0x2, &(0x7f0000000080)=0x5, 0x6)

[ 2332.550452][T25632] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2332.569862][T25650] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2332.578243][T25650] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2332.588302][T25653] loop3: detected capacity change from 0 to 4
[ 2332.602887][T25653] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2332.604982][    C1] sd 0:0:1:0: [sg0] tag#7804 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2332.617247][T25650] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2332.622338][    C1] sd 0:0:1:0: [sg0] tag#7804 CDB: opcode=0xe5 (vendor)
[ 2332.622379][    C1] sd 0:0:1:0: [sg0] tag#7804 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2332.630723][T25650] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2332.637576][    C1] sd 0:0:1:0: [sg0] tag#7804 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2332.652945][T25653] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2332.658212][    C1] sd 0:0:1:0: [sg0] tag#7804 CDB[20]: ba
[ 2332.707995][T25653] loop3: detected capacity change from 0 to 4
[ 2332.725529][T25653] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2332.748985][T25653] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2332.757852][T25666] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2332.806984][T25666] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:00 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x401, [0x8f, 0x400, 0x1, 0x10001, 0x9, 0x7]})
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x80, @scatter={0x7, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/10, 0xa}, {&(0x7f0000002580)=""/4114, 0x1012}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000001440)=""/240, 0xf0}, {&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000001540)=""/4109, 0x100d}]}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0})
r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000)
r4 = inotify_init()
dup3(r3, r4, 0x0)

09:44:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000edb9)
ioctl$VT_WAITACTIVE(r2, 0x5607)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r3 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:00 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20f507607f0000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000140))
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
ioctl$KDSETLED(r2, 0x4b32, 0x8000)

09:44:00 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f0001ba000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:00 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@sco={0x1f, @fixed}, &(0x7f0000000100)=0x80)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', r1, 0x29, 0x4, 0x0, 0x3f, 0x19, @remote, @remote, 0x40, 0x8000, 0xfffffffd, 0x7f}})
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

09:44:00 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00c0ed000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2333.231214][T25704] loop3: detected capacity change from 0 to 4
[ 2333.239145][T25699] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2333.243123][T25704] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2333.256318][T25700] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2333.256708][T25704] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2333.264672][T25700] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:00 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000721000/0x3000)=nil, 0x3000, 0x200000c, 0x4010, r0, 0x92df5000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2333.306767][T25700] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2333.313855][T25720] loop3: detected capacity change from 0 to 4
[ 2333.315134][T25700] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2333.326575][T25720] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2333.343635][T25718] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:01 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d0cdce269335342b4c68edea395e7f2dcc9f905e8533b40d1b593d0a63f116e868163af237dd042543dccabcd19a58d87ff03079ca2ba545b23dd233cfa59915d510f78604d286b474fc748ba9a80de7b5d224c2043"])

09:44:01 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40000100000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2333.351328][T25720] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:01 executing program 5:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0xfe}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000080)={r0})
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x227f, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2333.402719][T25730] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2333.411139][T25730] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2333.427922][T25720] loop3: detected capacity change from 0 to 4
[ 2333.437594][T25730] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:44:01 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x70da0100000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:01 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x62)

[ 2333.445993][T25730] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2333.450891][T25720] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2333.462873][T25742] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2333.485844][T25720] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2333.513173][T25750] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2333.521542][T25750] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2333.534691][T25750] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2333.543079][T25750] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:01 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/153, 0x99}], 0x3, 0x4, 0x7)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = socket$netlink(0x10, 0x3, 0x5)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x121597a8, 0x2, 0x1ff, 0x7, 0x5, "917f287bd49a55502cbc7b0864ccfcfd4e2e1f"})

09:44:01 executing program 4:
r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x41c100, 0x20)
write$binfmt_aout(r0, &(0x7f00000001c0)={{0xcc, 0x80, 0x1, 0x3a6, 0xd, 0x0, 0x3c5, 0x1}, "4c6f97f9", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa24)
set_mempolicy(0x1, 0x0, 0x0)
set_mempolicy(0x0, &(0x7f0000000080)=0x70, 0x5b)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

09:44:01 executing program 5:
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)

09:44:01 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00fffe000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:01 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc04f0000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:01 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0xc0, "86976b1c10653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x4402, 0x110, 0x1f}, 0x18)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x1)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000001c0)={0x5, 0x7, 0x0, 0x8001, 0xa, "733428a44484307c8fa631cdd367bc2b429370"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r2 = syz_open_pts(r0, 0x80000)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

[ 2334.144892][T25776] loop3: detected capacity change from 0 to 4
[ 2334.152226][T25775] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2334.154866][T25779] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2334.160618][T25775] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2334.171088][T25776] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:01 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)

[ 2334.192955][T25775] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2334.199506][T25776] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2334.201350][T25775] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2334.229402][T25776] loop3: detected capacity change from 0 to 4
09:44:01 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x0)

09:44:01 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf04a0000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:01 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='^'])

09:44:01 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x1)
sendmsg$inet6(r0, &(0x7f0000002680)={&(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}, 0x2}, 0x1c, 0x0}, 0x0)

[ 2334.245926][T25794] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2334.252598][T25776] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2334.271520][T25776] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:01 executing program 5:
openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8040, 0x0)

[ 2334.310651][T25808] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2334.319072][T25808] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2334.366712][T25808] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2334.375083][T25808] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2334.382586][T25820] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:02 executing program 5:
socketpair(0x15, 0x0, 0x0, &(0x7f00000015c0))

09:44:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x8, 0x8, 0x8, 0x10000, 0x19, "6aa376991d78d16ebc6b4b73132cae8bef4945"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x10000000)
dup2(r0, r1)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:02 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf0ff1f00000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:02 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x80000000000000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@dioread_lock}, {@bh}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@measure}]})

09:44:02 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, "8000007d00"})
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x6, 0x250c81f1, 0x5, 0x4, 0x8, "54814b219957d0bef8d71ee775d0a4c8d4aeaa"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x4, 0x8001, 0x10000, 0x7fffffff, 0x5, "5a93bac94595004b8700"})
syz_open_pts(r1, 0x800)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000200)="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")
r3 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001d00e200"})

09:44:02 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000fff000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000001a40)={'veth1_to_batadv\x00', @ifru_ivalue})

[ 2335.071185][T25845] loop3: detected capacity change from 0 to 4
[ 2335.073970][T25847] loop4: detected capacity change from 0 to 264192
[ 2335.084127][T25845] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2335.093811][T25843] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2335.102187][T25843] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2335.114322][T25845] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2335.129382][T25843] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2335.137759][T25843] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2335.139932][T25847] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2335.154368][    C1] sd 0:0:1:0: [sg0] tag#7755 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
09:44:02 executing program 5:
openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)

09:44:02 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'syztnl2\x00', 0x0})

09:44:02 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:02 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4)

[ 2335.165707][    C1] sd 0:0:1:0: [sg0] tag#7755 CDB: opcode=0xe5 (vendor)
[ 2335.172585][    C1] sd 0:0:1:0: [sg0] tag#7755 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 2335.182182][    C1] sd 0:0:1:0: [sg0] tag#7755 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 2335.191746][    C1] sd 0:0:1:0: [sg0] tag#7755 CDB[20]: ba
09:44:02 executing program 5:
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/198)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/114)

[ 2335.225536][T25870] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2335.233900][T25870] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2335.234894][T25845] loop3: detected capacity change from 0 to 4
[ 2335.251549][T25845] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:02 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='A'])

[ 2335.273758][T25870] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2335.282210][T25870] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2335.290505][T25845] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2335.337345][T25888] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0xf, "02100000c19f00000000000000f3d200"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
splice(r0, &(0x7f0000000180)=0x40, r0, &(0x7f00000001c0)=0xfff, 0xfffffffffffffffc, 0x2)
fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000140)='system_u:object_r:groupadd_exec_t:s0\x00', 0x25, 0x1)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:03 executing program 5:
openat$null(0xffffffffffffff9c, 0x0, 0x400200, 0x0)

09:44:03 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x200000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:03 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x3, 0xfffffffd, 0x1, 0xffffffff, 0x14, "86976b1c00003d0a90f68fbdb71f0000000200"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:03 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f00feff000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:03 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000000000)={[{@nolazytime}, {@test_dummy_encryption}, {@jqfmt_vfsold}]})

[ 2335.900992][    C1] sd 0:0:1:0: [sg0] tag#7756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2335.911402][    C1] sd 0:0:1:0: [sg0] tag#7756 CDB: Verify(12)
[ 2335.917414][    C1] sd 0:0:1:0: [sg0] tag#7756 CDB[00]: af 65 0a 08 db 75 33 0f 14 09 97 de 15 67 c6 7b
[ 2335.926987][    C1] sd 0:0:1:0: [sg0] tag#7756 CDB[10]: 6e ee 16 56 5d 6d 1e d5 a3 5c 23 43 0e 1c bf 0d
[ 2335.936549][    C1] sd 0:0:1:0: [sg0] tag#7756 CDB[20]: af
09:44:03 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x149081)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x37d)

09:44:03 executing program 5:
r0 = openat$full(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0)

[ 2335.968246][T25918] loop3: detected capacity change from 0 to 4
[ 2335.977660][T25916] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2335.990622][T25919] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2335.999002][T25919] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:03 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00de035b07994ca7504cfd5523d05a8ff511d4a2be066567b956ff1ee376848a8e89cbce789011b6aee54efc8d654ffe77a206726398f80b872ba03656b1a817c3460249bc3e82e38811dc09c39e1bf88561eb785041cca25516a0a08f5823ff26a84fa4b083f23eb99bdba46f2e7c6c3ed393a131bc84d650e3e92ac88a08a2fc8c94abf643502556fbc7dc59b7475297585266a8bc07d854de04d7794aa386ee5afa61aa1e35882a3507fd156e50f97036c62d246c1d8cb32a6487e5345a5add923c7919c39510f8f1d9000000000000"])
fsopen(&(0x7f0000000080)='fuseblk\x00', 0x1)

09:44:03 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_ifreq(r0, 0x8919, &(0x7f0000000080)={'bond_slave_0\x00', @ifru_flags})

[ 2336.002881][T25918] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2336.018420][   T25] kauditd_printk_skb: 20 callbacks suppressed
[ 2336.018432][   T25] audit: type=1400 audit(1629539043.657:143): avc:  denied  { associate } for  pid=25906 comm="syz-executor.1" name="ptmx" dev="devtmpfs" ino=91 scontext=system_u:object_r:groupadd_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
[ 2336.040124][T25918] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2336.086092][T25919] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2336.089994][T25936] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2336.094457][T25919] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2336.127331][T25918] loop3: detected capacity change from 0 to 4
09:44:03 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x300000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2336.134193][T25918] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2336.153458][T25936] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2336.155752][T25918] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:03 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x149081)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x37d)

[ 2336.178850][T25956] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2336.187280][T25956] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2336.203767][T25956] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2336.212214][T25956] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:04 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x1, 0x6)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

09:44:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000004300), 0x0, &(0x7f0000004380)={0x9}, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)

09:44:04 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2336.822721][T25974] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2336.830081][T25979] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2336.838462][T25979] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x10400, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, "8000007d00"})
ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180))
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x5, 0x3, 0x8, 0xff, 0xf71, 0x2})

09:44:04 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000edb9)
ioctl$TCXONC(r2, 0x540a, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r3 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:04 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x500000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2336.869607][T25988] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2336.897251][T25999] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2336.905669][T25999] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2336.908664][T26000] loop3: detected capacity change from 0 to 4
[ 2336.924895][T25999] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2336.933316][T25999] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:04 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e8af855082b39d60d19"])
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x4289, &(0x7f0000000100), &(0x7f0000771000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)='x', 0xffffffffffffff89}, 0x0)
syz_io_uring_submit(r1, r0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0xff, @scatter={0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001700)=""/231, 0xe7}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x4010, r4, 0x425d000)

09:44:04 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x600000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2336.938076][T26000] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:04 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x602000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2336.989973][T26000] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2336.997059][T26017] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2337.008685][T26018] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2337.017233][T26018] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2337.048414][T26000] loop3: detected capacity change from 0 to 4
[ 2337.053342][T26030] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2337.054827][T26017] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2337.062873][T26030] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2337.082043][T26030] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:44:04 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x700000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2337.090407][T26030] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2337.101519][T26000] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2337.114176][T26000] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000040000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:04 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))
set_mempolicy(0x2, &(0x7f0000000080)=0x8001, 0x0)

[ 2337.142729][T26040] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2337.151162][T26040] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2337.196182][T26048] loop3: detected capacity change from 0 to 4
[ 2337.198021][T26040] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2337.204248][T26048] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2337.210676][T26040] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2337.222971][T26047] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2337.244140][T26048] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2337.308484][T26048] loop3: detected capacity change from 0 to 4
[ 2337.308805][T26047] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2337.321390][T26048] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2337.336395][T26048] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x7}})

09:44:05 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:05 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xfffffffe, 0x0, 0x80, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x2)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x2, "00e1f7ff1c000000000000f1ffffffffffffff"})
r2 = socket$inet(0x2, 0x6000000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x6)
sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000040))

[ 2337.678297][T26076] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2337.686667][T26076] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2337.701231][T26076] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2337.709621][T26076] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000edb9)
ioctl$KIOCSOUND(r3, 0x4b2f, 0xfcc3)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:05 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000001380)=[{&(0x7f00000000c0)="f4d7c63c128c500ff7ad8df31ad76e8e48b4092e255d0d9af719894ec908ed95901ab5ce6e25799dfb63e80169761cab346091bac36317c058568ce414819edb2705dd124995f32b0d138ba2a0d4f39ec7abfd9280ea1a9f4c020c984b5d0d8c6471059741c0b66c8afdbee610aee1191c636c87bcc0768e9acb74e2c9a6c9a15983e1f7d9737519c2ee3ae3825a7dffb0349d05275b47758f69e0fe6418224351e02e263c776ad63140698e44c0e7cb33bda74ae43d5c8863b3f81075b31562c69194c825a462eeb86868c62b89dc2cf69f5cce06c2ca11affa79", 0xdb, 0xfffffffffffffffc}, {&(0x7f00000001c0)="eb3cc33751a7fda9ecb2730d0557c74e6cd7aeaac9b86d3eff56d677560e577648d7710caaf14c1842b0d8863d4f58b9c6ba49e25c482bcc17ec70df99c81fc263c06a5315b17eceb06f4b8bb773381cfe25594b11621d05c13c51149c645af4061aeed552a610c346f83bd28c31da8dd0f9b0f4cacd768b74e774cba8ebc920dc6a6cf480343b13a118569f4ac45db3a1d2b2d1b9b29a9535df1ad99793cea5c0b105f97eba0f1bf5d235fc247af990edd73f63084404d52f8d569f78de18cf6223592d7c2444e232119b4953c50ff7c4a030ea6002b1ed1881b73c1d6dbda2f77a29a0a9713239f9cea46fe5a4e7893e7650ba00275711c96f89eed4ec9b72e92fb5077f83c7d8daa4f8f3c6aec56daeb4dc5feef967731e5bc2eb06f0fa8feae1fa076e7e21ef0fae608aa3a4f4b27ebbb563807bb33e6d73566c37bdc82587482f7fcb120a3759a3127eb75408d9513a6b5c571cfc9bc70156e8911d6c6b91b2a4e9e7b49b7a9f5766149d1b18a7f4b7ab80e49c1b8df4a0f216c764f816a05c49bfec775b6aa64c5602145cf4f8453a7807ec99bd8adda905eb30657a2b21c64c4fcd1d9b9bffacfbc60ef825886823c8c552d546f32f767011242a570bda83cb6a711cd0a6760380f56724dbaa504c3df87a7e30dc2d901f27adc4cba63884579c755dc098fec762d05880da455fb7f0b83b75e614029f9846c96885de63b2eb6a7def623a9324ec889e0989a09a44772b97e963c63cf3c73c44a7ddebaa251eb2912f62f5b8de438e1fc4974474283d826a21763164c3c3c2513538bdd7231ea41be8e37a69f7508362d71a962b4912412ec58c116331a7a7d4db0df3151572bc0454c6e84d3a0f5b3f586cd943405d6ea255f39bd175cfbd22f591607f66c3567231b45e3ecc262f65201ebed1e93ea50717447256162cefcb331e57b8b08d8db86a676ef92835bd5e688178507b115eb2ea225dd850c0982a68ec2ca257f91b6c62988ceb6a49fc43feb827058a779538e7a8458eeacf28e03044b715bd40be2db692d2f5842f69eb0a786c79ea56104f0ff3f67718a0f96427259af764b16f724a90dbe7379cbcc0c3f973b6a215f4af81c591c7eac46567b6d9ecc4f372f34fdbcc96d8d73c1a02549ea18cda107fb5421c7a776f1b61fcdd668fbf9ec9e7f49d5a6f000933a86638be773328dd1fcb73faade9f3e5256ffd4a03c6e15192c4f69d67b55c256e559948bca8f27460b66bc8e4441026164c3ae856ba3d48cbedc34403493100726117a7101c34c943d1257022d194395eed2e45a507016909b8114f9d156994e343d30c7092240de5a9b4052f704f10c6dbcbd4132bf565f9124e65c1b53e645eb3420fe0e34ed7deb787f08c2ddd8110613b1558834e4a630d93514e91e4ede485d5298af28dc42c57eb40707cfa6f60cf65359a32c53a232eeaaaf2a273deaff189af8ebec02a0344b93ebf525749c1e718ced3f6810d86107f283b9548df2b894260293801eced7280b8f927f7ffeadfcefbd626e37685dc75db1b42d94074e2d623c647b056045cdab15d0f9850fc11ec1722291f925a0e2ead8dd2d67c832ff99de4483e0ce97b28bdda5b7d996a153285f2e2c6a4058f186180c3889e45dae47e5d7ef8c0b2ec63f5a9c60df351a799d57e333ad9e52cb59fda1922189b3507c571ee194398cf4523b3cfbd1069be51c6228504e11139709d52697fab501e47a518548864084e06e9363784fb875344a28e47a6a549106ce52e58540de6317ffae642c2f4527b5105a765bdd4b818a42de13a7f1a7d96bf5a3998b1b8cec850de86154423ec0e50488342630b0817deb552e5b8db9665dc452a2a9c548cbf9f3fd45e6e16456db9c4b6256570c05ccef976e678bf1aa40552ad7d5761eaf4573a74c17cf4c594d06b5233e3d3a49b08711a2bf81fc84fedb69995ab5410bf0b60cdc53e1341dcd4bf7578963be33908e562d7bb325bc447bf95b197979cbeb4d411ccf2465948ac93d8efdee99b2241743efb47dfb44f47d3f5b3f9b55a8a661008a61059a558266289cefe478899800b8c5240ab088e6dacd80ff52c6602070d6e14fa64977c0154e1639095f88a079e5f559c5351cb9309336738f75d9efa55bec310ea766f818eb7c391b2fa15762401e8abccac64cbef1b10faa1178b2414bf064764c4319beeca89a97793999d63097c7a3d363a7312fdc2a7c1bf4a26bf99a1bd96931e56687308abadb5c7d5f7c322a9d223d9bf07569a1349f6958558eb04aba41705e475cea8edb730502af26d39fb9f22b03fc20ec61292c52e4b9630da55fb63818dac09f0de6d3c298ede574ed2c424c1040f55bd57c1c42599311e63c4a8a4dc7d41e68cb181776aba8afaf5437723cf24c7d6b22f53cc714507bbee524c3c8f01a4e28d03f6c747a2883a28396b68d306b4345f4a817682376453ca5f2927304c470755a95f429988faef35b900f4b0de82186a01d570dc09651d57164f40b5c13dcf405b8a9ff7737988f99cf5162c0f5ca8dadc2de802dae7131b2b449bf1877ebfd92063606952479ac4e7599e34cfee584934fa96da3eb5b792e0828b3c23aa4a82be2e1404edb5063f4606a7ff0385c1c71592de34c1bc3a8616fb4d75df666c136ecb619ac267936b1f283bd75f1e0e7f60bb80802fb107b15de7ae73f9c20571d21ba9a3e49e7be8b5ec613fc7b7d7a5456a2cdb68623dc5651832dd86ba35ba2e181e931f10189623de4daa2e2abf3eed9c76cfa42e4c76ea080bf33b77fbb985d4eed4e35f32b30d1b9b29469a3a8ee214b5d2a7704e783c7b473d927b2ccb9a2dba7f67993c0efcbbee6ff0e1f99fed451ef66d99c7e17c1349a044b671f7549cf8b15047616537cb9f8889b6f0c9f6b61505087c1f9953424e3d8e982aa62264c6680d663a53c733d3099e608db40587666776c15c95297ed5a089b051e8df2c849d789e0b54e6324e1f45571282791bcd0f59ac791629bd76288ebb48527910a75459c3a4e652c3601964fb7766b5865786af816ddbd0e35ad7c529a8b7f6f3551de4392d81ee94212286f784ac329166d0627d3f387f480ab8a83ac08252fb3102d32c85e69788f2f1e5dc54480324ada3eb0b14c43b3be33120fdd3adf51deca0c1126847160db94bb6493d0d4b4a02396a133988af719c29d6508b18fc1e3d44b1febf203d613c4b4ce839848c5f5354b185fd00b7a1976bb0d76daa2164afd881678f0a589fe36d681a68a14a200e3eb80c36b3b1745aa02d6c44f4bfbdfdb78e42a55905bc1554f1c3f7742899e6fecc61309a7cee641f50a5b636144720ee6166f715961d2eb322a21b53be4f098e0396f621a327e80f5c15976e0c18124188e2a5150c40e98584379524806213813c6cded02aedb4e79723d498ca15efaacd494654346e1829c51d73dcb28dce94d39ccb0e047ad045ccd07943db4795538668bc863f26480e3d6901d5153030f3be0db29be1e5fed15852f0c21465bf6f0b7f7633ec771243502e7d3468759e1c52c8c3c62fc480b20dbbbb0f28f5eee6d8e6fbef7510b064e1adf5d18228faa6a7eec42439703fc20682a2689cabf27264c91c21de044bc69670155b4697335407cdde791364931ee463d3ed7538f4f29debbf43ce4d9da13b67fb2708758fa427dcbae1d44cf9a8d01e8e91a2e2184e9709702c556a5d54004a45a37c323e8d8828487329dfbe736a93996ff0b6015ad564fb2eec42af71c64dde8d24221e1abea87cf9585a7d781eafddb78946ca21e777c0a603fdf6534825d8d91f307c666b29df6fd30a0fa2da17055309362a4733dff0b1415299169cdf53f35ea856efffff7fe643b64ed6ca86bc7be6bc8589b762f3045f42fe62ccd0b8a5496beb6ef1785a4717474ed86df8e67328be9382557f4ab25a51e706a99268eea18ec65064171f7a3780c8589ea13048ccb42acdd32cd45bad2b62249e5acba68d494ede7e798e575cc2366bc3691d0a793338f5666f15f586cdaf496822711f3878725f05d7746fb56b7773f1c77ff74546b940a3e6fdf842109846900aa21bf1f637c9d4950928cdecd60e2c6ef566082b0bbff51733a1130c4d268dd234e38ffff4ba660b17ada247e3dddd0b419e4b21d9ac5d630181b56dae6f3b152406507045978218113d94681c47f8fe5bec213f1fdecd633f758c02be3144f56ac3a212c52ddd290094d92962f52c344d600c71e9dfd1a5158b272d3bd30e5fab3cddf93dc1f696321df214299686a06883ba3816b9b737cd8eb6307014f5e0d59801f653671f208e4f2c2b96b3d723d5433637e24cb8219d5fa1808e06c2a0774578fca8e8db85c8b641abfdba768f1de00b4cb9595df4ad7ace6f06879a409d8680174f8bbd293545ba077fbd0424319a14265f4a4601c6e97f65cf5821e798021f3fec602f670b366881d39ec833723ec6e3699c93f0b6e82d19b36c7e41c93cfe3c80128dd4914606a62a318960c0aa1c84f192a5264fe5fa40e91f44d8324913dbc601891745d5cdae157e8dcaa7c7e869bedca0f34467a8f2bd1d923ea2d71f5fcda70615d768544a7528c5dd655b7aa46d9a91d857edd7889a29430bc171822a8ba8874d9e6de5a4a55983eb173482a81a2539b63c361be96772bb5e7a88b4379f81e297a6a098c5d34b2bfb33decf2b3e86460fd2cfa2c64133922a1734ec8c26e24b3807e115f057598c7e1c5d01fd85604bce8a27f8400ec98a2f34664cf7baaad2b73cc5c11d47738080b4c544149aa40b08dc9096a10e29506d12d329da77c362657cfe6948be6ef9512f64b74a0dbf8c03c3b861caa672f994d9ff8815c1e715214813ab648576d69c4b436f3731e682a2c91713b5ef9354fb80f9228fe4f76a1995045171b4dae6c4cf788fcd1c69e7860f87e666f4a6882fe698bd20329272aa1b12547e01e98b87a5ab032a1fc3bf39b7ea74a27102fbfac1f55a6e5ed3a6a986f935ba65783584a90d925bd7e80b88cf53da9414e16fa7f168a4c8409d3d4af4d19f37316070174b9cc8d3156ce5220c33a356f7174096bfd6f194591baf47a4abf904bc6e67df8b23a5d66bf88761c32f0e50c365b837baf9563fbf7cf67eec7d3b22d6946af3b2ef9f62b072e2a045f3f532313d545519b5bc987bb9c5995708bb2d55e54d25b1480a0b2730e400c41d7ff84e800f7097a8615f33e84554ba04635e851d011674e54b426f1edcc39c1782b1eb1fb77422cc5abfc3ef10b8e8831f9373f4b78595942082da2af83103156a20cad5c27fc6efb87c2d4bd0f2bc7809ba04bdd9fb6ead7c26bcc5822893482c07eb802a55c3a4e8833dac975080bd909fd3fb63bca4dd7a4b0103faf68f80391edaaa5167cebce8595c6000505e9c01f012a1ac176fdad162a4e19082b19cc35d55c39e13ef6afc957b1c82bc8a617e187fbcf5a6f13a7b5e2febf407347b34942eff7929510d4e317ef34626cea8d4b3aa4751d06c3da27165f83232b40866a29492f3e57c67263ee393098940deb8c97d5c388834e8e1fa1ec2c99869f9cffc60e81064599dd531ed7368ece2d90dd651dbff2bce99a5e6c07fb7cf7cb2457128104c367dc1dc06ec42d618885d34c9246ba06b3967e0f564cef8ec487e252dbdc362ca59be6f97453c90752f6c5d298fc327f1e47e3ac53cba4f93ab1e42b02cfe52b2fbf7c33d0dd2e7ca3b3eacb27dc11c769833dc1a69c04f60689373803228f6e3b5c76d5e436b1d8ffbe0f2edf9c16e20df5d8904c244e610d8", 0x1000, 0x4}, {&(0x7f00000011c0)="af2cfa04f5168bab95051bc446e04b44bff2951b593b5639a6ff03ef1b7ab6b69b4ca9d932d6957a0169369a0c63832236e469251a897c1579a93ce8951aef42391005e20ea34327035340980205a93e81443b3cabc9b515bce435afe0bef3f85e257d3b16ce096d4362fe8b6bc7c89b88ff74412a75d42b1bf02ad13b0a12b92525d86562b6fda44cb7d51c069303ff251d", 0x92, 0x8}, {&(0x7f0000001400)="7e8f650678c1b921f6ff5c582d8540773bfcb4e70064e432d983ac260ad53de878f62c8ae4f019a9d630f234709ba2d4efa4d5188cda7ef6c7963e5e95e9b1acb35a69aef9787f664b5b02f01d1e77c2d049c4000c62236f42b1e894b80a2f161f2ea085b687a9ca02573f2c9eed65518cbcde81a5d719649288744d267432021ee11687140472a06fa623e8576d0166c1b609b5e4a9d7b3074ae8", 0x9b, 0x5}, {&(0x7f00000012c0)="7a130ae8131263ca97c72a3d5492af65acaa9e34be9945de6eae810f09980f7dc7cd2e15c7974639325ce99583e2bdef98d135353e43f3f39f097a7837e48827e675e9ad8b78d54947893c9c20a56601bcc3bb40351097dab74f9337a388e2ff08b36f973f402b53b7ca773f1ef4c20c064471350ee8a776d3c7f08cd6f7379ed7eb7f365a941597aadc2ccd24fb3b8810445dcb51de1e3dc6861bdadab27b994f8941315e1d0a73aac39f26", 0xac, 0x9}], 0x10018, &(0x7f0000000080)=ANY=[@ANYRESDEC])

09:44:05 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000080000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:05 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000001580)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}}], 0x1, 0x8810)

09:44:05 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x900000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:05 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, 0x0}}], 0x1, 0x8810)

[ 2337.786722][T26095] loop4: detected capacity change from 0 to 16383
[ 2337.793060][T26096] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2337.795319][T26098] loop3: detected capacity change from 0 to 4
[ 2337.801537][T26096] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2337.810359][T26095] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:05 executing program 5:
openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/block/loop1', 0x3a9800, 0x0)

09:44:05 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f004000080000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:05 executing program 5:
syz_open_dev$evdev(&(0x7f0000000100), 0xffffffff, 0x0)

[ 2337.831913][T26098] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2337.844645][T26096] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2337.850090][T26098] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2337.853095][T26096] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:05 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa00000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:05 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x180)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x402400, 0x101)

[ 2337.916042][T26112] loop3: detected capacity change from 0 to 4
[ 2337.931907][T26112] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2337.951285][T26112] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2337.967752][T26122] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2337.975028][T26125] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2337.983415][T26125] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2337.996062][T26112] loop3: detected capacity change from 0 to 4
[ 2338.002944][T26112] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2338.014125][T26112] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2338.015092][T26125] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2338.031944][T26125] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, "8000007d00"})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0)
syz_open_pts(r1, 0x90000)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

[ 2338.619883][T21173] ==================================================================
[ 2338.627984][T21173] BUG: KCSAN: data-race in n_tty_receive_char / n_tty_receive_char
[ 2338.635863][T21173] 
[ 2338.638168][T21173] write to 0xffffc9000e539000 of 8 bytes by task 26149 on cpu 1:
[ 2338.645863][T21173]  n_tty_receive_char+0x622/0x6c0
[ 2338.650872][T21173]  n_tty_receive_buf_common+0xf2e/0x4e70
[ 2338.656484][T21173]  n_tty_receive_buf+0x2b/0x40
[ 2338.661229][T21173]  tty_ioctl+0x968/0x1120
[ 2338.665537][T21173]  __se_sys_ioctl+0xcb/0x140
[ 2338.670110][T21173]  __x64_sys_ioctl+0x3f/0x50
[ 2338.674678][T21173]  do_syscall_64+0x3d/0x90
[ 2338.679085][T21173]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2338.684962][T21173] 
[ 2338.687275][T21173] read to 0xffffc9000e539000 of 8 bytes by task 21173 on cpu 0:
[ 2338.694883][T21173]  n_tty_receive_char+0x5fc/0x6c0
[ 2338.699890][T21173]  n_tty_receive_buf_common+0xf2e/0x4e70
[ 2338.705509][T21173]  n_tty_receive_buf2+0x2e/0x40
[ 2338.710345][T21173]  tty_ldisc_receive_buf+0x5b/0xf0
[ 2338.715460][T21173]  tty_port_default_receive_buf+0x54/0x80
[ 2338.721161][T21173]  flush_to_ldisc+0x1c5/0x2c0
[ 2338.725821][T21173]  process_one_work+0x3e9/0x8f0
[ 2338.730657][T21173]  worker_thread+0x636/0xae0
[ 2338.735236][T21173]  kthread+0x262/0x280
[ 2338.739286][T21173]  ret_from_fork+0x1f/0x30
[ 2338.743703][T21173] 
[ 2338.746006][T21173] value changed: 0x0000000000000963 -> 0x0000000000000964
[ 2338.753089][T21173] 
[ 2338.755394][T21173] Reported by Kernel Concurrency Sanitizer on:
[ 2338.761519][T21173] CPU: 0 PID: 21173 Comm: kworker/u4:4 Not tainted 5.14.0-rc6-syzkaller #0
09:44:06 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x102401, 0x0)
r2 = syz_open_pts(r1, 0x418000)
syz_open_pts(r2, 0x40081)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000380)={0x1, 0x0, 0x2, 0x4, 0xb, "34fc034255f3851d13ec783cfdcf7e812e82d1"})
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000300)={0x1, 0x0, 0x1000, 0x91, &(0x7f0000000140)="4bc3ee8cb220cd97100442a30ecda5ad2032534a67a5af6d905d1b6bb75ba51e71076ddf0649b0543dc6653f689af608378c8cf11f8b890a1d196ec485c80bc2815f8a6f374c42c76362306061194fc32c6a117be2ef40c015ab99cd292dd52a849cc54dc4de9a5185675a3caf2570f525430845b8878ae6058a2f7ad9f9a8562757403e7f87f71ea7147764acb916544f", 0xfe, 0x0, &(0x7f0000000200)="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"})

09:44:06 executing program 5:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$full(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0)
pselect6(0x40, &(0x7f0000001180)={0x40}, 0x0, 0x0, &(0x7f0000001340), 0x0)

09:44:06 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x24022, &(0x7f0000000280)=ANY=[@ANYRES16])

09:44:06 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb00000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f0000000c0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000)
r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0)
dup3(r2, r3, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

[ 2338.770086][T21173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2338.780125][T21173] Workqueue: events_unbound flush_to_ldisc
[ 2338.785920][T21173] ==================================================================
09:44:06 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)={[{@noload}, {@block_validity}, {@usrjquota}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@grpquota}, {@norecovery}, {@journal_async_commit}, {@grpid}]})

09:44:06 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgrp(0xffffffffffffffff)
sendmmsg$unix(r0, &(0x7f0000006a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006980)=[@cred={{0x18, 0x1, 0x2, {r1}}}, @cred={{0x18}}], 0x30}}], 0x1, 0x0)

[ 2338.837173][T26163] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2338.837953][T26166] loop3: detected capacity change from 0 to 4
[ 2338.845649][T26163] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2338.865762][T26166] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2338.878389][T26166] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:06 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc00000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:06 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000))

[ 2338.923577][T26177] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2338.937948][T26166] loop3: detected capacity change from 0 to 4
[ 2338.955773][T26166] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:06 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000001580)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x1, 0x0)

09:44:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000400000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2338.971534][T26166] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2338.978602][T26189] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2338.989339][T26189] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2339.034522][T26189] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2339.038975][T26201] loop3: detected capacity change from 0 to 4
[ 2339.042961][T26189] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2339.054991][T26201] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2339.070224][T26201] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:07 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000140)={0x5, 0x949})
syz_open_pts(r0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x182)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:07 executing program 4:
set_mempolicy(0x2, 0x0, 0x3)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

09:44:07 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setownex(r0, 0xf, &(0x7f0000000180))

09:44:07 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000100000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:07 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd00000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x9, 0x8080)
syz_open_pts(r1, 0x141240)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffd, 0x0, 0x1f, 0x2, 0x10, "a7260a617bbc8477"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x4000000000edb9)
write$P9_RSTAT(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="590000007d0100000052000000050000004004000000050000000009000000000000000000000cf4000009000000000000000100270a002f6465762f70746d78000a002f6467762f70746d780000002f6465762f70746d7800"], 0x59)

09:44:07 executing program 5:
clone(0x3a01100, 0x0, 0x0, 0x0, 0x0)
clone(0x269e7180, 0x0, 0x0, 0x0, 0x0)

[ 2339.759392][T26225] loop3: detected capacity change from 0 to 4
[ 2339.771051][T26230] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2339.776203][T26229] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2339.779450][T26230] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2339.788802][T26225] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:07 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000200000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000000000), 0x55, 0x2022, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)

[ 2339.807159][T26225] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2339.819693][T26230] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2339.828075][T26230] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:07 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x581e01, 0x0)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x0)

09:44:07 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe00000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2339.882500][T26249] loop3: detected capacity change from 0 to 4
[ 2339.904470][T26249] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2339.920551][T26257] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:07 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000940)=""/4096)

[ 2339.929341][T26249] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2339.939709][T26261] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2339.948082][T26261] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2339.966598][T26257] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2339.978989][T26261] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2339.987406][T26261] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2340.007423][T26249] loop3: detected capacity change from 0 to 4
[ 2340.028586][T26249] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2340.055853][T26249] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:08 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8, 0x80800)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000140)=0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:08 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:08 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x28}})

09:44:08 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x33, 0x5)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

09:44:08 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000040200000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x8, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x3c}}, 0x0)

09:44:08 executing program 4:
set_mempolicy(0x8000, 0x0, 0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x40d2, 0x2252, 0x2, &(0x7f0000000140)={[0x3ff]}, 0x8)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
set_mempolicy(0x2, &(0x7f0000000080)=0x1, 0x6d)
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2be, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[], [{@uid_eq}, {@fowner_gt={'fowner>', r1}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]})

[ 2340.639891][T26295] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2340.644593][T26298] loop3: detected capacity change from 0 to 4
[ 2340.655537][T26300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2340.663906][T26300] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2340.681413][T26298] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2340.690917][T26298] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2340.720818][T26300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2340.729226][T26300] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:08 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/uts\x00')
fsetxattr$security_ima(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0)

[ 2340.742910][T26318] loop4: detected capacity change from 0 to 24778
[ 2340.756522][T26298] loop3: detected capacity change from 0 to 4
[ 2340.761812][T26318] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:08 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1100000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:08 executing program 4:
r0 = creat(&(0x7f0000000240)='./file0\x00', 0x162)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, 0xd, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4001)
set_mempolicy(0x1, 0x0, 0x0)
set_mempolicy(0x8000, &(0x7f0000000080)=0xffffffff, 0x15)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

[ 2340.788263][T26298] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:08 executing program 5:
clone(0x746e054abc2fc97b, 0x0, 0x0, 0x0, 0x0)

[ 2340.841709][T26298] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2340.852713][T26336] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2340.880433][T26340] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2340.888826][T26340] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2340.909383][T26344] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2340.931022][T26340] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2340.939400][T26340] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:09 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x8000, 0x10001, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:09 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000300000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:09 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'macvlan0\x00', @ifru_flags})

09:44:09 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1200000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:09 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
getresuid(&(0x7f0000000080), &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x509}}, {@usrquota}, {@data_journal}, {@nombcache}, {@discard}, {@journal_path={'journal_path', 0x3d, './file0'}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_gt={'euid>', r0}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '/!\x9c#-'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0)

09:44:09 executing program 2:
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x8000, 0x8001, 0x80, 0xfffffffc})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:09 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3e}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)

[ 2341.520583][T26369] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2341.529244][T26370] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2341.537639][T26370] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2341.542738][T26371] loop3: detected capacity change from 0 to 4
09:44:09 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001040)={0x0, 0x0, 0x0})

[ 2341.562195][T26371] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2341.572704][T26371] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2341.591875][T26370] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2341.599400][T26389] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2341.600306][T26370] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:09 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1300000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:09 executing program 4:
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/197, 0xc5, 0x22, 0x0, 0x0)
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"])

[ 2341.619198][T26371] loop3: detected capacity change from 0 to 4
[ 2341.626017][T26371] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2341.653913][T26371] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:09 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x1, 0x8810)

09:44:09 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000400000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2341.684006][T26407] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2341.692468][T26407] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2341.706975][T26406] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2341.749222][T26417] loop3: detected capacity change from 0 to 4
[ 2341.762409][T26421] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2341.771580][T26417] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2341.782698][T26417] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2341.805522][T26417] loop3: detected capacity change from 0 to 4
[ 2341.816539][T26417] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2341.827406][T26417] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:10 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x1, 0x8810)

09:44:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b889f00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:10 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x102060, &(0x7f0000000080)=ANY=[@ANYBLOB="f3a4447b2b31d63f64817c079414"])
symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00')

09:44:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000500000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:10 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x15dc000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000edb9)
syz_open_pts(r2, 0x40282)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r3 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:10 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x1, 0x8810)

[ 2342.430265][T26448] loop3: detected capacity change from 0 to 4
[ 2342.448947][T26449] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2342.457401][T26449] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2342.470937][T26448] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:10 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x1, 0x8810)

09:44:10 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2700000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:10 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2000, &(0x7f0000000180))

[ 2342.482808][T26449] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2342.491223][T26449] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2342.497359][T26448] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:10 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$unix(r0, 0x0, 0x3f, 0x0, &(0x7f0000001140)=@abs, 0xffffffffffffffc4)

[ 2342.566976][T26448] loop3: detected capacity change from 0 to 4
[ 2342.573749][T26448] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2342.584075][T26480] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2342.592481][T26480] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2342.601618][T26448] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:10 executing program 5:
clone(0xa692922a8cb85459, 0x0, 0x0, 0x0, 0x0)

09:44:10 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaad43, &(0x7f0000000140)=[{&(0x7f0000000080)="dbf9b976d7906a7440a397f9a529797fe25e80639bf1414885c2c73605e3dcd18d7397f9864b34054c94f80f63d671bfad442f1c8a99287fefc0733631d3bdfb527f855e8c150f5fe64b75eb3d2f8746e7ab", 0x52, 0x6}, {&(0x7f0000000100)="a1516cfeb2976d191836e66961aa0d26bf5b25103fc83ad41a9c832536cc4a9b40c2b5", 0x23, 0x5}], 0x18000, &(0x7f00000001c0)={[{@noload}, {}, {@mblk_io_submit}]})

09:44:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000600000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2342.615118][T26480] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2342.623450][T26480] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2342.701256][T26501] loop3: detected capacity change from 0 to 4
[ 2342.722670][T26501] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2342.734096][T26501] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2342.800277][T26501] loop3: detected capacity change from 0 to 4
[ 2342.808457][T26501] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2342.818547][T26501] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x408084, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x2, 0xfffffff8, 0x0, 0x81, 0x1c, "8000007d00"})
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000000edb9)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000001c0)={0x2, 0x80000000, 0x2, 0x30000000}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e1e, @remote}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x4000000000edb9)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x6, 0x2, 0x101, 0x7f, 0x4, "82ff97f21dd8f8324bda7024f61ab03d01ba6b"})
ioctl$TIOCSIG(r1, 0x40045436, 0x40)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r5 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8a)
ioctl$VT_SETMODE(r5, 0x5602, &(0x7f0000000140)={0x80, 0xad, 0x1000, 0x8000, 0xff28})

09:44:10 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:10 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000040)={'vlan0\x00', @ifru_flags})

09:44:11 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000040600000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:11 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x1f, 0x0, 0x0})

09:44:11 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x100011d, 0x0, 0x0, 0x9f6, 0x11, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000edb9)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x4000000000edb9)
r5 = syz_open_pts(r4, 0x90a00)
ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

[ 2343.325543][T26523] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2343.333925][T26523] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2343.397758][T26523] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2343.406174][T26523] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2343.414535][T26538] loop3: detected capacity change from 0 to 4
[ 2343.435416][T26538] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4800000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:11 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'veth0_vlan\x00', @ifru_ivalue})

[ 2343.446527][T26538] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2343.498293][T26549] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2343.506703][T26549] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2343.519682][T26538] loop3: detected capacity change from 0 to 4
[ 2343.528681][T26549] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2343.537076][T26549] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:11 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/3, 0x3}, {&(0x7f0000000b00)=""/62, 0x3e}, {&(0x7f0000000b40)=""/147, 0x93}], 0x3, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

09:44:11 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'})

[ 2343.539322][T26538] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2343.632951][T26538] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2343.636077][T26571] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2343.650659][T26571] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2343.658012][T26570] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2343.673505][T26571] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:44:11 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
write$binfmt_aout(r0, 0x0, 0x661)

09:44:11 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000700000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6800000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2343.681911][T26571] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:11 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/193, 0xc1}], 0x1}, 0x100}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/136, 0x88}], 0x1, &(0x7f00000008c0)=""/219, 0xdb}, 0x7}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=""/107, 0x6b}, 0x4}], 0x4, 0x10000, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2aa1000, &(0x7f0000000080)=ANY=[@ANYRES64])
umount2(&(0x7f00000000c0)='./file0\x00', 0x8)
listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/172, 0xac)
chroot(&(0x7f0000000100)='./file0/../file0\x00')

09:44:11 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x1, 0x8810)

[ 2343.786365][T26590] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2343.794778][T26590] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2343.815298][T26593] loop3: detected capacity change from 0 to 4
[ 2343.825878][T26593] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2343.839694][T26593] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2343.850230][T26590] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2343.858661][T26590] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:11 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x5, 0xd1, 0xd4e, 0xffff, 0x11, "c0e4cf790186c2e954b2ea0eb5107969dbe64d"})
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

[ 2343.915907][T26593] loop3: detected capacity change from 0 to 4
[ 2343.923860][T26593] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2343.943825][T26593] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000380)="4faa132e6df8aa5028b756e90b49a7f3491fceac7c001a6a9581bf5f598a5226b57c1c6de2b69baca7f51b14f463985ee23ba612f85fa12df99b9647944c261906a91f0c7806c437c57273508cec5fa11dd0f7cbe383fa5f96df656d8d9b4711f123d49a2baf7e17a3237b3f6f359fd525b7eef27b3ce08155c2f2d1d211fd0e881e378e63806493e996d0b2e7986acd752a87100d47675b9ad98562ba9372b4522a087a4311f1f378a23387435ee190d178b9000913c15e3cc3c39d9e38d763bae22410cc69b6f8f3")
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/223, 0xdf}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="000000002400ebffffff00000100c087414400008aec860cc11403bc6f709d04d8d3ebd789926d26243bab6823634ba6fe19654edb837ba7ffffffff00000000f50492c5d35e5259869d90f59dadd2cd37c66c2b735556a8aa732cb5ebe7a0e5f5a78c85a1d377fa04498d01000000aa87e637725f0600000000000000d4c45486aa31c8499c138839a36135120b26f79cd758aa248ff3742947c3173edbff1aabbd8cd6641a1d9c4deb7d7210e4284349dd0678ed6ab15db93936a3fe72462a59071f3fb6fd0d6f7ae064dc2ef375e5aaa003fb34aa02315c942c544b2f137a345fc589733d4e6a6f00"/247, @ANYRES32=<r3=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000074dae6e389ebf8088caeae19cc7ddeb53b19ab869658e607cbda9456a49a1dfd9e079cb81d551f8588ec901c989c2e"], 0x78}, 0x40010000)
ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000480))
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000340))
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x10000, 0x2, 0xff, 0x3f, 0x9, "c972c3803d44f9ee265fd39550d5fd9d400310"})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:11 executing program 5:
socket(0xa, 0x3, 0x8)

09:44:11 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x2)
set_mempolicy(0x1, &(0x7f0000000080)=0x80000001, 0x100)

09:44:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:11 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000800000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:11 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040)="7f", 0x1}], 0x1}}], 0x1, 0x8810)

[ 2344.309957][T26633] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2344.318388][T26633] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2344.336897][T26636] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2344.339409][T26635] loop3: detected capacity change from 0 to 4
09:44:12 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_ifreq(r0, 0x8919, &(0x7f0000000080)={'veth0_to_bridge\x00', @ifru_flags})

09:44:12 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7400000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2344.353821][T26633] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2344.362209][T26633] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2344.366963][T26635] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2344.384595][T26635] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:12 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x8}, 0x1c, 0x0}}], 0x1, 0x8810)

[ 2344.414532][T26636] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2344.460679][T26635] loop3: detected capacity change from 0 to 4
[ 2344.475962][T26657] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2344.484494][T26657] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2344.498628][T26635] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:12 executing program 4:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5)
set_mempolicy(0x8000, 0x0, 0x4000)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[])
set_mempolicy(0x8000, &(0x7f0000000080)=0x8, 0x8000)

09:44:12 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_ivalue})

[ 2344.509710][T26657] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2344.518150][T26657] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2344.538085][T26635] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2344.592718][T26673] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2344.652919][T26673] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:12 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x118, 0x1d5d, 0x0, 0x0, 0x12, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
syz_open_pts(r0, 0x191000)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:12 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:12 executing program 5:
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
clock_gettime(0x0, &(0x7f0000000000))

09:44:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000900000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:12 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
set_mempolicy(0x8000, &(0x7f00000000c0)=0x3, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82081, 0x10c)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

09:44:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x6c16, 0x5, 0x800, 0x7, 0x2, "a22666afef1f7ea2f4c0c2a343cd73bf18f38c"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x24}})

[ 2344.881954][T26706] loop3: detected capacity change from 0 to 4
[ 2344.890780][T26707] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2344.897872][T26708] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2344.902465][T26706] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2344.906289][T26708] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:12 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8cffffff00000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:12 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000049c0)={'batadv_slave_0\x00'})

[ 2344.927818][T26708] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2344.927947][T26706] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2344.936244][T26708] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:12 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB])

09:44:12 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xfe16, 0x200007fd, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)

[ 2345.017530][T26706] loop3: detected capacity change from 0 to 4
[ 2345.023582][T26737] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2345.032308][T26730] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2345.040714][T26730] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2345.047394][T26706] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000a00000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

[ 2345.061856][T26706] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2345.067401][T26730] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2345.079588][T26730] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2345.137272][T26754] loop3: detected capacity change from 0 to 4
[ 2345.145573][T26754] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2345.154792][T26754] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2345.201634][T26754] loop3: detected capacity change from 0 to 4
[ 2345.208376][T26754] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2345.218058][T26754] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:13 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xac, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000180)="62b8fe79041d97cea28d518f26f3c80f5bde753aa4785a993d254107c49f3dc559f42a288410f2a684ed290bc66dbce39e8a1c58", 0x34}, {&(0x7f00000001c0)="fc86eca56e713834140863de8e9282703b5938a34e67", 0x16}, {&(0x7f0000000200)="2b6275bb319d4b0085baa19082b99cb476f5bede746b5d8c028a4c9bd27bbedba209ae3bb61afdd25fe3eb3295b2c281d7f1d60e90c4d3208cd78efaf92d7c788eed5549b529aac009e604c0b61a28593cc592815b42d005d8d1c65b40ec26fad8ad16df4c3fcb1970e7f24fdf1221a682acf65089804d183a3d83a5b18bfb1f73239a4f9403dcfa0801e73464e5089cbc6868d88effb8f48ab0fe09a7e299b5f5c27d5d90e0182902a803bae4d7641f60fc0beeb109d4c0a2141bfa15407153", 0xc0, 0x4}, {&(0x7f00000002c0)="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", 0xfc, 0x9}, {&(0x7f00000003c0)="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", 0x1000, 0xff}], 0x0, &(0x7f0000001740)={[{@dmode={'dmode', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x32, 0x62, 0x39, 0x61, 0x65], 0x2d, [0x31, 0x34, 0x61, 0x38], 0x2d, [0x62, 0x62, 0x35, 0x66], 0x2d, [0x37, 0x66, 0x33, 0x36], 0x2d, [0x32, 0x38, 0x63, 0x33, 0x63, 0x63, 0x65, 0x35]}}}, {@pcr={'pcr', 0x3d, 0xb}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}]})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001680)={0x0, 0x3, 0x1aee4b3, 0x5393})
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000edb9)
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000001600)={0x7, 0x9, 0x20, 0x3, 0x20, "b55b2d5b82e92f3cad0d3949ebe676717e49fe", 0x9, 0x8})
preadv(r1, &(0x7f0000001640)=[{&(0x7f0000001500)=""/230, 0xe6}, {&(0x7f0000001600)}], 0x2, 0x6, 0x800)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:13 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe82a1b0000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:13 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0032f2e60d170783eb6583c4b914830c3567e19f9a1175602ec7cc526468beaeaecb1e1f1dcd7a608e3753f5e908eff14e76824121761c10c5dbac66097064d938822a16059ba35d262e89"])
syz_open_dev$tty1(0xc, 0x4, 0x1)

09:44:13 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x149081)
write$binfmt_aout(r0, 0x0, 0x37d)

09:44:13 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000b00000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:13 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x15, "00e1000000001000000008000000001d00"})

09:44:13 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8915, &(0x7f0000000000)={'macvlan0\x00', @ifru_ivalue})

[ 2345.813858][T26780] loop3: detected capacity change from 0 to 4
[ 2345.834386][T26780] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2345.853894][T26786] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
09:44:13 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

[ 2345.862283][T26786] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2345.867440][T26787] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2345.881555][T26780] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2345.893463][T26786] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2345.901864][T26786] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:13 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000c00000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:13 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf6ffffff00000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:13 executing program 5:
clone(0x7021100, 0x0, 0x0, 0x0, 0x0)

[ 2345.915664][T26780] loop3: detected capacity change from 0 to 4
[ 2345.922013][T26787] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2345.922511][T26780] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2345.939192][T26780] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:13 executing program 4:
set_mempolicy(0x0, 0x0, 0x8)
set_mempolicy(0x8000, &(0x7f0000000080)=0x81, 0x5)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

[ 2345.993055][T26812] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2346.001532][T26812] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2346.017444][T26812] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2346.025819][T26812] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2346.042697][T26821] loop3: detected capacity change from 0 to 4
[ 2346.065692][T26821] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2346.075332][T26821] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2346.108764][T26825] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2346.125412][T26821] loop3: detected capacity change from 0 to 4
[ 2346.132112][T26821] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2346.141784][T26821] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2346.152815][T26835] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='coredump_filter\x00')
syz_open_pts(r1, 0x0)
r2 = syz_open_pts(r0, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})
ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x4, 0x6, 0x4, 0x9, 0x15, "7d94d639630852f4"})
r3 = open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x100)
ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000001c0))

09:44:14 executing program 5:
syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x3a1d01)

09:44:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf801000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000d00000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:14 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))
set_mempolicy(0x3, &(0x7f0000000080)=0x4, 0x0)

09:44:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x9, 0x3, 0x5437, 0xffffffff, 0xc, "4b1a47c760f4fb8a21b75b464e4c79f813223b"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:14 executing program 5:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
r2 = dup2(r1, r0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x5450, 0x0)

[ 2346.742534][T26861] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2346.744302][T26859] loop3: detected capacity change from 0 to 4
[ 2346.750950][T26861] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2346.775612][T26859] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2346.780781][T26860] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:14 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x8, 0x2)

09:44:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:14 executing program 5:
r0 = socket(0x11, 0x3, 0x8)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000005300))

[ 2346.807829][T26861] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2346.811719][T26859] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2346.816231][T26861] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2346.836597][T26860] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:14 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))
set_mempolicy(0x0, &(0x7f0000000300)=0x6, 0x7)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10a1829, 0x0)
r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
r2 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000)
chdir(&(0x7f0000000340)='./file0\x00')
dup3(r0, r1, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f00000003c0)={0x0, 0xfb, 0x11d, 0x4, 0x5c, "04ab0583adef0000000000000800", "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"}, 0x11d, 0x2)
syz_io_uring_setup(0x289, &(0x7f0000000100), &(0x7f0000771000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, &(0x7f00000002c0)='x', 0xffffffffffffff89}, 0x0)
r6 = syz_io_uring_setup(0x6950, &(0x7f0000000180), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x6, 0xa0ff20, r7)
syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xbf1c, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r7}}, 0x3ff)
creat(&(0x7f0000000380)='./file1\x00', 0x2d)

[ 2346.898949][T26859] loop3: detected capacity change from 0 to 4
[ 2346.910013][T26859] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2346.923269][T26885] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2346.931148][T26894] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2346.931644][T26885] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
09:44:14 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
write$P9_RSTAT(r0, 0x0, 0x0)

[ 2346.965629][T26859] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2346.979527][T26885] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2346.987953][T26885] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2347.017057][T26894] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:15 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x3, 0x0, "00e1000000001000000008000000001d00"})

09:44:15 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xff07000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:15 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x7b6e, 0x0, 0x0, 0x0, 0x13, "00e1000000001000000008000000001d00"})

09:44:15 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000e00000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:15 executing program 5:
semctl$GETZCNT(0x0, 0x1, 0xf, &(0x7f0000000140)=""/210)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x4e23, @empty}, @rc, @ipx={0x4, 0x2, 0x400, "4d2405390510", 0x4}, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x997, 0x9})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000053c0))
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @remote, 0x3}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, @can, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x9, 0x8})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)

09:44:15 executing program 4:
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080)=0x1)
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0))
io_uring_enter(r0, 0x1f34, 0x1d55, 0x1, &(0x7f00000000c0)={[0xfffffffffffffe16]}, 0x8)
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180))

[ 2347.622699][T26928] loop3: detected capacity change from 0 to 4
[ 2347.636738][T26928] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2347.648225][T26932] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2347.655453][T26928] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:15 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, &(0x7f0000000540))

09:44:15 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl(r0, 0x800000000000937e, &(0x7f00000003c0)="020000000000000018")

[ 2347.656682][T26932] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2347.672957][T26933] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2347.690285][T26932] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2347.698739][T26932] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2347.710679][T26928] loop3: detected capacity change from 0 to 4
09:44:15 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000000f00000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:15 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

[ 2347.718199][T26928] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2347.728222][T26928] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2347.747883][T26946] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
09:44:15 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
set_mempolicy(0x4000, &(0x7f00000000c0)=0x1, 0x100)
set_mempolicy(0x8000, &(0x7f0000000100)=0x2f48, 0x6)
set_mempolicy(0x8000, &(0x7f0000000000)=0x7fffffff, 0xc4c0)
set_mempolicy(0x0, &(0x7f0000000080)=0xfffffffffffffff8, 0x5)

[ 2347.796719][T26960] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2347.798177][T26958] loop3: detected capacity change from 0 to 4
[ 2347.805114][T26960] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2347.831796][T26959] autofs4:pid:26959:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.0), cmd(0x0000937e)
09:44:15 executing program 4:
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00c1481b9b18865acd48968aa7fcab7b4d0fe73251897195bf523997a38b6f34045816543bf10776382c446d07219a54afc51062e3dde6a558bf97cb07b0f86329e195263162a29048890bef793809b162c50802ec402a4c295b34c6a7"])

[ 2347.845017][T26959] autofs4:pid:26959:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e)
[ 2347.868094][T26960] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2347.876955][T26960] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2347.888791][T26958] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2347.905240][T26958] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2347.933382][T26976] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2347.947893][T26958] loop3: detected capacity change from 0 to 4
[ 2347.963639][T26958] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2347.973583][T26958] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
09:44:16 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x28181, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x5f)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x222000, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000edb9)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x4, 0x7fffffff, 0x80000001, 0x5cc, 0x14, "e184cb06cda623eba7ed4aee17d632c6cdd958"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8000007d00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x11d, 0x0, 0x0, 0x0, 0x0, "d048acd58f0e7b8889fc0bd34b219bfccbc19f"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r3 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

09:44:16 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f00000001c0))

09:44:16 executing program 4:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000001c0)={0xea0ead7c, 0x2, 'client1\x00', 0x0, "965a9ef1f3390736", "ba63ca5cbbee29b5f0d076584a7de5598c1be2c9f3b212a0da16a877820415d9", 0x0, 0x7fffffff})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000080)=""/129)
set_mempolicy(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="a0"])
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0xc1, 0x4}, 'port1\x00', 0x30, 0x171613, 0x20, 0x3, 0x80, 0xfffffff9, 0x80000001, 0x0, 0x7, 0xfd})

09:44:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:16 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000008000000006000000660000000f000000001000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3829dc27bb28955f4655f000000000000000001000000000000000b0000000002", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[])

09:44:16 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "86976b1c14653d0a16e65f0747903c8fbdb71f"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x80000003, 0x408, 0x5, 0x0, "8000007d00"})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfe8d)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e1000000001000000008000000001d00"})

[ 2348.532578][T27003] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2348.541425][T27006] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2348.545739][T27007] loop3: detected capacity change from 0 to 4
[ 2348.549857][T27006] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2348.561313][T27007] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
09:44:16 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8919, &(0x7f0000000080))

09:44:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

09:44:16 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={0x0, 0x34}}, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

[ 2348.579225][T27006] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1
[ 2348.587606][T27006] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000025d80c4d
[ 2348.598998][T27007] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks)
[ 2348.622467][T27016] EXT4-fs (loop4): VFS: Can't find ext4 filesystem