criptors: Inode bitmap for group 0 overlaps superblock 02:32:34 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800022003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000003f00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 960.711935] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:35 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0xf6ffffff00000000) 02:32:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000004000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 960.805126] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 960.809871] minix_free_inode: bit 1 already cleared [ 960.839964] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 960.851458] EXT4-fs (loop1): mount failed [ 960.874957] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 960.946507] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 961.012231] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 961.028234] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 961.041638] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000004800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 961.072763] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 961.096295] attempt to access beyond end of device [ 961.111441] loop2: rw=2049, want=6434, limit=52 02:32:35 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800023003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 961.116829] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 961.127802] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 961.141658] EXT4-fs: failed to create workqueue [ 961.154272] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 961.164361] EXT4-fs (loop1): mount failed [ 961.229846] minix_free_inode: bit 1 already cleared 02:32:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x1c) 02:32:35 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0xfeffffff00000000) 02:32:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000004c00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:35 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3f00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000006000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 961.361104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 961.382843] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 961.462426] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 961.491381] attempt to access beyond end of device [ 961.496436] loop2: rw=2049, want=6434, limit=52 [ 961.503498] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 961.520698] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 961.524295] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 961.552101] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 961.579584] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 961.614191] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:35 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0xff00000000000000) [ 961.631387] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 961.652498] EXT4-fs (loop1): mount failed 02:32:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000586500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:35 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80002c003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 961.699873] minix_free_inode: bit 1 already cleared [ 961.780730] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000006800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 961.865970] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 961.882364] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 961.933637] attempt to access beyond end of device 02:32:36 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 961.956781] loop2: rw=2049, want=6434, limit=52 [ 961.995776] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 962.031063] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 962.039859] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000006c00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:36 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0xffffffff00000000) [ 962.159965] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 962.170273] minix_free_inode: bit 1 already cleared [ 962.187042] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 962.200453] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:32:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x1c) 02:32:36 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80002d003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 962.240871] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000007400000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 962.302575] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 962.325123] EXT4-fs (loop1): mount failed [ 962.345008] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 962.352540] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 962.377328] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000007a00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 962.403800] attempt to access beyond end of device [ 962.422265] loop2: rw=2049, want=6434, limit=52 02:32:36 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f00000000c0)={0x33, 0x2}) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 962.521187] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 962.533078] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:32:36 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80003f003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 962.574787] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 962.592406] minix_free_inode: bit 1 already cleared [ 962.613596] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000008100000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 962.637421] EXT4-fs: failed to create workqueue [ 962.644568] EXT4-fs (loop1): mount failed [ 962.699810] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000ffffa88800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:37 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:37 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800040003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 962.820621] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 962.854072] attempt to access beyond end of device [ 962.859043] loop2: rw=2049, want=6434, limit=52 02:32:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000ffffff9e00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:37 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec1280180822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c78b9288f5cfa718a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 962.998113] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 963.049966] minix_free_inode: bit 1 already cleared [ 963.141922] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 963.158387] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 963.188414] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:32:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x1c) 02:32:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000006d900000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:37 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800048003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 963.245131] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 963.255224] minix_free_inode: bit 1 already cleared [ 963.269457] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 963.309980] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 963.315757] EXT4-fs (loop1): mount failed 02:32:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000fffffff000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 963.409898] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 963.421158] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 963.475978] minix_free_inode: bit 1 already cleared 02:32:37 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80004c003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 963.514932] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 963.541632] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:32:37 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0xf1e, 0x2, 0x4, 0x0, 0x81, {0x0, 0xea60}, {0x7, 0xc, 0x81, 0x49, 0x4, 0x9, "6932ece6"}, 0x7ff, 0x1, @fd=r0, 0x601, 0x0, r0}) linkat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000240)='./file0/file0\x00', 0x400) 02:32:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000fffe00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 963.559521] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 963.582546] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 963.592914] EXT4-fs (loop1): mount failed 02:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000fff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:38 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xedc0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 963.736147] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:38 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800060003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000007fffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 963.922402] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 963.930953] minix_free_inode: bit 1 already cleared 02:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 964.033045] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 964.072767] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 964.110639] attempt to access beyond end of device [ 964.117171] loop2: rw=2049, want=6434, limit=52 [ 964.135960] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 964.143247] buffer_io_error: 2 callbacks suppressed [ 964.143257] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:32:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x1c) 02:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00f0ffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 964.231898] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:32:38 executing program 2: mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000030601010400000000000000030000010900020073797a300000000005000100070000000500010007000000"], 0x30}, 0x1, 0x0, 0x0, 0x4805}, 0x4000018) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) splice(r2, &(0x7f0000000180)=0x8001, r3, &(0x7f00000001c0)=0x9, 0x4, 0xd) 02:32:38 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800068003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 964.286111] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 964.300252] minix_free_inode: bit 1 already cleared [ 964.336772] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 964.370435] EXT4-fs (loop1): corrupt root inode, run e2fsck 02:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 964.383071] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 964.398780] EXT4-fs (loop1): mount failed [ 964.519905] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:38 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80006c003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:38 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xff0f, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 964.916001] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 964.987945] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 965.036553] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 965.096685] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}, 0x1c) 02:32:39 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800074003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 965.181309] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 965.208926] EXT4-fs (loop1): mount failed 02:32:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 965.337113] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 965.377177] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:32:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 965.427584] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:32:39 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80007a003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 965.473658] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 965.506024] EXT4-fs: failed to create workqueue 02:32:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 965.524472] EXT4-fs (loop1): mount failed [ 965.543203] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:39 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 965.674313] nla_parse: 20 callbacks suppressed [ 965.674323] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 965.734821] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:40 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8003fa003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 965.835723] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 965.875817] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 965.920909] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 965.946300] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 965.964603] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff004800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:40 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800fff003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x1c) [ 966.064561] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 966.073541] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 966.088804] EXT4-fs (loop1): mount failed 02:32:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff004c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:40 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20400, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 966.259889] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:40 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000005404000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 966.335232] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff006000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 966.461128] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 966.470388] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff006800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 966.536000] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 966.550943] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 966.553018] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 966.582460] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff006c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 966.627222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 966.651724] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 966.657657] EXT4-fs (loop1): mount failed [ 966.736568] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 966.756847] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:32:41 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800002003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 966.791971] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 966.813356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff007400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 966.876918] EXT4-fs: failed to create workqueue [ 966.914099] EXT4-fs (loop1): mount failed [ 966.922266] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:41 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 966.996207] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff007a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 967.088527] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 967.109388] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00f000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:41 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800003003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x1c) [ 967.230176] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 967.264705] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 967.281125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 967.292533] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 967.309497] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000003000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 967.360430] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 967.372779] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 967.397992] EXT4-fs (loop1): mount failed 02:32:41 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800004003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 967.511054] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 967.539930] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 967.574270] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 967.588603] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000006000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 967.628989] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 967.640321] EXT4-fs: failed to create workqueue [ 967.645089] EXT4-fs (loop1): mount failed 02:32:41 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800005003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:41 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40200, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00d906000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 967.837009] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000007000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 967.976005] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 968.002545] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:32:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000a000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 968.021748] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 968.044765] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:42 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800006003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 968.101429] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 968.107368] EXT4-fs (loop1): mount failed 02:32:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000c000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x1c) [ 968.238488] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 968.259678] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 968.298233] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 968.300157] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:32:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000e000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:42 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800007003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 968.395827] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 968.483142] EXT4-fs: failed to create workqueue 02:32:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000f000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 968.507036] EXT4-fs (loop1): mount failed 02:32:42 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1fffff, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 968.552813] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 968.736989] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00003f000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:43 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800009003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:43 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x1300050, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x1, 0x100, 0x8, 0x3}) r1 = pkey_alloc(0x0, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) recvmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/27, 0x1b}], 0x1, &(0x7f0000000340)=""/45, 0x2d}, 0x18000) keyctl$unlink(0x9, r2, r3) pkey_mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, r1) pkey_free(r1) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000100)=[{&(0x7f0000000080)="6bd4885b", 0x4}], 0x1, r2) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) 02:32:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000040000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 968.930481] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 968.957565] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 968.979235] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 968.988350] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 969.010317] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 969.026570] EXT4-fs (loop1): mount failed [ 969.054068] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 969.060900] encrypted_key: insufficient parameters specified [ 969.083718] encrypted_key: insufficient parameters specified 02:32:43 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800022003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:43 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x1c) 02:32:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000048000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:43 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6b6b6b, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00004c000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 969.256664] encrypted_key: insufficient parameters specified [ 969.263933] encrypted_key: insufficient parameters specified [ 969.331286] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff006558000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 969.423413] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 969.431645] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 969.461733] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:32:43 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r0, 0x0) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x81, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)}], 0x2100080, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=iso8859-4,file_umask=00000000000000000000010,dir_umask=00000000000000000000177,umask=00000000000000000000003,codepage=utf8,gid=', @ANYRESHEX=r0, @ANYBLOB="2c737562625f747977653d73656c036e75782c7375626a5f726f6c653d6d696e6978002c00"]) inotify_init1(0x800) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:32:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000060000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:43 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800023003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 969.488661] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff005865000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 969.562437] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 969.572445] EXT4-fs (loop1): mount failed [ 969.587740] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 969.633912] attempt to access beyond end of device [ 969.639676] loop2: rw=2049, want=6434, limit=52 [ 969.651432] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 969.661630] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:32:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000068000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:44 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}, {&(0x7f00000002c0)="07f1e316464f028dbb1ca50ab0d5a78cc974797f609c45ca288a9c9c87520d5e8af2d3da3fc7a5e088db5e6497e64817e0813b5b38c359caebfee733d918e500b55fe324f29d8eceb90f60c16b1442c311bb246954e80d4dfe5b0f5df2e2faa3b234f9c3fcab4aed0d72535c22d6369de37d0ae304645291dd0629997a8851d5ceedc45d6f081d5481195224fe8947a9a5fba40a9dd1462579c03767e504bab1304cf4cd37a2bc0055b645c916da05825107357ec19cc783aa9d718a20d8a3b17044f6e2add8bb864b4ce14b48", 0xcd, 0x4}], 0x0, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e20, @loopback}, {0x306, @local}, 0x48, {0x2, 0x4e23, @broadcast}, 'ipvlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0xa) lseek(r0, 0x0, 0x3) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)={0x4}) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:32:44 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 969.780609] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 969.790376] minix_free_inode: bit 1 already cleared [ 969.974426] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 970.054975] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 970.064252] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:32:44 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x1c) 02:32:44 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80002c003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00006c000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 970.112604] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 970.149842] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 970.224139] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 970.230679] EXT4-fs (loop1): mount failed 02:32:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000074000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 970.283016] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00007a000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:44 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 970.410439] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000081000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:44 executing program 2: syz_mount_image$minix(&(0x7f0000000500)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0xffffffffffffff57, 0x400}, {&(0x7f00000001c0)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x2, 0x82) connect$unix(r0, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB="c3c462ff7f54b5c2f5324165a473b057d17b010a719a16a426ee"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20044010) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x7) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) quotactl(0x8001, &(0x7f00000005c0)='./file0/file0/file0\x00', r9, &(0x7f0000000600)="90fe0af03150fd2cc6699a463e3a845268851941899b5d4f6946368104a0ad5523fecf65729b4b0af82dff9b7b3f27df0273c2100d0e971b7b") creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:32:44 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80002d003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0006d9000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 970.608027] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 970.643623] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 970.654454] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 970.665418] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 970.693585] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 970.699584] EXT4-fs (loop1): mount failed 02:32:45 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800048003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 970.715262] nla_parse: 22 callbacks suppressed [ 970.715272] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000f0000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 970.871491] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 970.886232] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 970.992641] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:45 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x1c) 02:32:45 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80004c003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:45 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00fffe000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 971.235819] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 971.260507] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000fff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 971.349771] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:32:45 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800060003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 971.427076] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 971.449375] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 971.463021] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00feff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 971.507149] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 971.539645] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 971.545436] EXT4-fs (loop1): mount failed [ 971.670670] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 971.693848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:46 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x3fc}, {&(0x7f00000001c0)="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", 0x312, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) connect$bt_l2cap(r0, &(0x7f0000000580)={0x1f, 0x7fff, @none, 0x4, 0x2}, 0xe) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) bind$phonet(r3, &(0x7f0000000500)={0x23, 0x81, 0x3f, 0x1}, 0x10) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000540)='./file0/file0\x00', 0xa5d, 0x0, &(0x7f0000000600), 0x5, &(0x7f0000000680)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}cgroup!posix_acl_accesswlan1&-[system['}}]}) 02:32:46 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800068003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:46 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000040030000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 971.864759] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 971.881591] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 971.907749] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 972.010153] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:46 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x1c) [ 972.089426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 972.105629] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 972.129354] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:32:46 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x5, &(0x7f0000001300)=[{&(0x7f00000001c0)="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", 0x1000, 0x8}, {&(0x7f00000000c0)="0efe620182e3d85eaba849d8e61d9afbae8d88ec68e16f466aafb942e492a9c99d03d99e4c4740b46e847a732b2ce4dce564c74441b11ec3f75b277c9d2f2951c5673038b7800d1bacbc2928878b18a5def773", 0x53, 0xc3b}, {&(0x7f00000011c0)="b2e346cc5fa81834d66279be12a936d2459ec617bf2395987c8c00205a0d8ddcd7bfcccc95e34edb366e5870df496da473b26460ddc169cd56ee8ea67599b898598cc59d10eb053dc87a596ce3032386edc982ad1b8119ca497fc9b42a8d25dc72187aa7dab8f3d7f0916b7440e095b07cecf9f8a563f99717561573e238ca43a225f0b96177866a586d35e1883209c15577b6db0a6b115355e898f906ce8faf02497b", 0xa3, 0x1}, {&(0x7f0000000000), 0x0, 0x1}, {&(0x7f0000001280)="0f0d543c219bffeb34f6d054128934aa293b0143038045551d6877fc21a67452a98b20013f16f99e519ea03554b84725a6d9a4718693c73962377f613788e9dd0b985fc15a9dfe2d2b6dd69b0e8cb6b8cf40705eb496c97ea8162a", 0x5b}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = getpid() ptrace$peekuser(0x3, r1, 0x4) 02:32:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000003400000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:46 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80006c003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 972.158069] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 972.208170] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 972.235750] EXT4-fs (loop1): mount failed [ 972.244207] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00fffff00000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 972.311460] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 972.312625] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 02:32:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0xff) lseek(r1, 0x0, 0x3) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x8001002, 0x1, 0x1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x4, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000180)={0x32d, 0x0, 0x10000, 0xd33}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f00000001c0)={r5, 0x3}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0x0, 0x110001) lseek(r6, 0x0, 0x3) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x1, @none, 0x3, 0x1}, 0xe) 02:32:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 972.395330] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:46 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 972.465379] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 972.476531] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 972.510410] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:46 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800074003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x1000000110001) lseek(r2, 0x0, 0x3) connect$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x2}}, 0x24) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0xa6a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x6, 0x8, 0x0, 0x80, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3f, 0xe39}, 0x100, 0x1, 0x80, 0x9, 0x8, 0x9, 0x1}, 0xffffffffffffffff, 0xd, r4, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000240)={@hyper}) 02:32:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000030101020000000000000000030000001400170000000800ffffff01000018b8000000032c001640000000000000e041800000010000400200000200000000998198759eb592b703000000800000003f38000d8008000200ac1414bb08000100ac1e000108000200ac1414bb080001000a01010014000400fc02000000000000000000000000000104000d801c0010800800014000000002080003400000007f0800014000000008500004804c0001800500020007000000060005001f0000000600040003380000050003000400000005000200fb0000000500010000000000000000000000e9000500060300000600050005b300000c00058005000100000000002c001080080003400000040008cc1d000240004000800800014000000001080002400000004008000240000003ff"], 0x134}, 0x1, 0x0, 0x0, 0x8005}, 0x4040040) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 972.709404] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 972.733903] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 972.752345] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 972.765455] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 972.785520] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 972.789586] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 972.797758] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 972.806779] EXT4-fs (loop1): mount failed [ 972.851946] attempt to access beyond end of device [ 972.857012] loop2: rw=2049, want=6434, limit=52 [ 972.866873] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 972.933073] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 972.942838] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 972.970917] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x1c) 02:32:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:47 executing program 4: r0 = msgget(0x2, 0xcf63ecc62a4c91a4) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/207) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 02:32:47 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80007a003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:47 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x0, 0x6) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 973.001742] EXT4-fs: failed to create workqueue [ 973.013710] EXT4-fs (loop1): mount failed [ 973.021685] minix_free_inode: bit 1 already cleared 02:32:47 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 973.172204] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 973.245343] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 973.282674] attempt to access beyond end of device 02:32:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@host}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) fstatfs(r2, &(0x7f00000001c0)=""/30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r5, 0x20, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x101}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000050) 02:32:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000600000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 973.300983] loop2: rw=2049, want=6434, limit=52 [ 973.303000] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 973.319740] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:32:47 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000033804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 973.396047] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:32:47 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r0, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f00000001c0)='./file0/file0/../file0\x00', 0x2, 0x7, &(0x7f0000000b80)=[{&(0x7f0000000200)="a99d410c26d7ad0c5c57ef02838accf2277dbc174e51b993567076af7aa79e93ef4292f619fc388a426f2f05be7284053f328df4282b0b20699a93947c56757fb5a46948ed1280eda6bc00ebf090e806122af6e5b43cc0baa5e942e727f8b61bfc1afcdb35b96ef8d56de741c7413b9b1008f071528a2cdcaee6cf3391c3554af91b100586ab386dcb383bd61bc0aaee60e239acb6ef4003a877b09ca0a0bf75f6beae065b795e36502955b3d3cae89ed1133e7e898c2aa2d4a19b46152c2ac1", 0xc0, 0x2}, {&(0x7f00000002c0)="4edca58e2aac5f285e7f96e79e0def10871069715541e77d7ff227ab0c1f9050cad3c3712e9f24d3b8239e076921b6ee4b659e1d64aea744e3c2ad6b", 0x3c, 0x20}, {&(0x7f0000001740)="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", 0x1000, 0x6}, {&(0x7f0000000300)="109eee5593405759799dcf4946164fd759c27691181f62ea83c7e7b2746beb6e40ca15731f6145299b944d63d8610f397d757b", 0x33, 0x6}, {&(0x7f0000000340)="b15078043d0df94526284ce5b925ce62d4a49d0c6de9c1996a91fecbe4b4c2", 0x1f, 0x5}, {&(0x7f0000000600)="cb6bb4ecc0697dcdbec53d22dd7b4f0f2c8a3b049772d7fc8399519afb28ca9ec3316b56b197180614958c28f15b09cbdc78d63bb5421d27f2aecea6dbda04518ed3b8be9b7b9269df807a106c2111bc63df63de92f66d57ae5017a4c659b2efb7f32123c3d6b45cc631769a4e282a9a3fdf78ddca2b8681468feac39bea44df5dd7a59fbb9e81cecca34b86efd64d5a6065a955423bd2cb37cf548bc7e4afd080772118aef59a3644139e533f6e43a42baf58cd60882b6e82415e18cf045f912bf9feea5d475142b9e7b588", 0xcc}, {&(0x7f0000000ac0)="9cbcf25016a295d3e87399b3218192557ffffaca84202d11faf1be6c13cd6e7411e88e9502f12dd9feb38a5bfd1459fe1a6533cb203bd2f7ef130037f0f71d67183548a9756ae039e8d3c5540832df34181fdb5d4fae0841ba58a419e44cf59f3a0e4ee87b9db7907b8b99744792735ab49cf8298e350c13abf2375e80b565d103cd36355c06106d285cea879ad023caa2f78a2efeb0d3898e00", 0x9a, 0x1}], 0x100000, &(0x7f0000000700)='\x00') creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000cc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) [ 973.458737] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 973.482130] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 973.502307] minix_free_inode: bit 1 already cleared [ 973.541367] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 973.544525] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 973.555462] EXT4-fs (loop1): mount failed [ 973.662172] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 973.672457] attempt to access beyond end of device [ 973.677528] loop2: rw=2049, want=6434, limit=52 [ 973.684242] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 973.688777] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 973.702275] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 973.736537] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 973.786201] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 973.806041] EXT4-fs: failed to create workqueue [ 973.814453] EXT4-fs (loop1): mount failed [ 973.889073] minix_free_inode: bit 1 already cleared 02:32:48 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) fcntl$notify(r2, 0x402, 0x18) epoll_create1(0x80000) fallocate(r1, 0x0, 0x0, 0x110001) lseek(0xffffffffffffffff, 0x0, 0x3) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:bin_t:s0\x00', 0x1b) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000100)) 02:32:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:48 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000fa033804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:48 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) 02:32:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x1c) 02:32:48 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x7000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 974.072055] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 974.081802] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 974.153978] attempt to access beyond end of device [ 974.161985] loop2: rw=2049, want=6434, limit=52 [ 974.202229] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 974.213532] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:32:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:48 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800010043804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40a00, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000100)) 02:32:48 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000000c0)={0x4, @remote}) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 974.293096] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 974.318388] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:32:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000e00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 974.345946] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 974.359464] minix_free_inode: bit 1 already cleared [ 974.394753] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 974.409557] EXT4-fs (loop1): mount failed 02:32:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000f00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000001000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 974.481396] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 974.580449] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 974.594735] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 974.615286] attempt to access beyond end of device 02:32:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x6068c0, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000180)={'raw\x00'}, &(0x7f0000000100)=0x54) [ 974.624439] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 974.635456] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 974.650354] loop2: rw=2049, want=6434, limit=52 [ 974.662355] audit: type=1800 audit(1590028368.890:268): pid=6673 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=16137 res=0 [ 974.667535] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 974.696352] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 974.724247] EXT4-fs: failed to create workqueue [ 974.739750] EXT4-fs (loop1): mount failed [ 974.833132] minix_free_inode: bit 1 already cleared 02:32:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x1c) 02:32:49 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000053804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:49 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={{}, {r1, r2/1000+10000}}, 0x100) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:32:49 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x9000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000003f00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x701100, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/156}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 974.999357] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:32:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 975.044324] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 975.056333] attempt to access beyond end of device [ 975.063765] loop2: rw=2049, want=6434, limit=52 [ 975.080788] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 975.127611] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 975.147132] audit: type=1800 audit(1590028369.370:269): pid=6714 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=16306 res=0 [ 975.166036] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 975.179054] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 975.196643] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:49 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e0c8ef2503bfde9d98a8eb0e55696ae38c02000a00900cda40ff1ad5c98f13", 0x22, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./file0\x00') 02:32:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000004800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 975.237496] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 975.250308] EXT4-fs (loop1): mount failed 02:32:49 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000063804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000180)='./file0\x00', 0x3ff, 0x2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="10ab2d77dad8e63b2aa2ce6b1534c3ce4aba63e4939338bfb04d0629ef794c8e539403314ba4af1de3a9ee", 0x2b, 0x4}, {&(0x7f0000000200)="bf8780cad28ab65c7e2235715243393caa657df4ba502d02aabe04dac54a8fcbe4250adc3fecc698e96d16c7b242719746388ed96b7a3504a2e3931f0dbbc3b55c9612ae7b18ea384a1b70065536159b6269017e770f7eec05cdd6962678cbd5a5fff65f344721e7f6e58c31460a9613b6cbee4f329f24b7b339aa37afd3c06b54850e66ba21ad239a4efc066cddded456ebe6e1d28bed981cbe7a291781c68a6932123a86550d5745c02cb712500214a71e2210765176d7d41f435c42", 0xbd, 0x2}], 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) lseek(r3, 0x3, 0x3) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x38}, 0x1, 0x0, 0x0, 0x534c7a6adbca365b}, 0x800) [ 975.279540] minix_free_inode: bit 1 already cleared 02:32:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000004c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 975.441864] MINIX-fs: unable to read superblock [ 975.459648] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 975.472862] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 975.483522] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 975.499897] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 975.509728] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 975.510032] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 975.541787] EXT4-fs (loop1): mount failed [ 975.580235] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 975.694432] MINIX-fs: unable to read superblock 02:32:50 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10040000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000006000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x1c) 02:32:50 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) syz_mount_image$cifs(&(0x7f00000000c0)='cifs\x00', &(0x7f00000001c0)='\x00', 0x2d, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="431f85d293e64dd30cd3678c472104d49f5c58711bed7a8c42981d697a1266853b1a7c31fbe5cf5a5008b65032e97a35c01981ae0bc4fb84867ccf029c7aba4c3e26662d3d4fcbb336a4b48211bd76f4ac504aa08cecc532c27914ea1ca6c2826e409a4056cc608f1edfa1507d9e840de47f72bce4549c71914e61fd15faae84ca1591ae4163094878d639968153bf36e839ac550722ba1241d3f74b3c405b10184d63b88fedb60af781bece0b600ba7802e13a2a04401cae67a3b78e43e77ad1f6ecce45e94d55cee0b24973fded744b0339a7e8bc007a3a0", 0xd9, 0xff}], 0x8010, &(0x7f0000000340)='em1}\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000480)={0x400, {{0xa, 0x4e23, 0x65, @mcast2, 0x3f}}, {{0xa, 0x4e23, 0x0, @ipv4={[], [], @remote}, 0x80000000}}}, 0x108) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)={0x8, 0xc, 0x4, 0x0, 0x3ff, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x2, 0x1, 0x3f, "b1aa3dc2"}, 0xa44, 0x4, @planes=&(0x7f0000000380)={0x8, 0xffff0001, @fd=r1, 0xfffffff9}, 0xff, 0x0, r2}) inotify_add_watch(r3, &(0x7f0000000440)='./file0\x00', 0x204) 02:32:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180), 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) lseek(0xffffffffffffffff, 0x0, 0x3) lseek(0xffffffffffffffff, 0x0, 0x3) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x2, 0x6, r9}, @BATADV_ATTR_GW_MODE]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 975.815745] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:50 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000073804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000586500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 975.925559] nla_parse: 17 callbacks suppressed [ 975.925569] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 976.039132] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 976.056896] attempt to access beyond end of device [ 976.081731] loop2: rw=2049, want=6434, limit=52 [ 976.088600] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 976.113513] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 976.127816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 976.149985] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:32:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000006800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 976.211682] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 976.236611] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:50 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x7fff}], 0x30610a9, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x4) ioctl$SIOCRSACCEPT(r0, 0x89e3) [ 976.265252] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 976.283354] EXT4-fs (loop1): mount failed 02:32:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xac3630711bb3fe26}, 0x8800) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 976.308548] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 976.319152] minix_free_inode: bit 1 already cleared [ 976.344726] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000006c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:50 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000093804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 976.460495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 976.535988] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 976.580987] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 976.601276] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 976.614651] EXT4-fs: failed to create workqueue [ 976.620726] EXT4-fs (loop1): mount failed 02:32:50 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000007400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}, 0x1c) 02:32:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) uselib(&(0x7f0000000080)='./file0\x00') ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 02:32:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000007a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 976.719216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 976.742904] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:51 executing program 2: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="600084e00a000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x1000090, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000010205000000000000000000020000090e000600736e6d705f74726170000000080009400000000508000440000000061800028006000340000200000c0002800500010000000000d78fe868bc85c014798ca173e4d7dda50d8696465675f54341013a392b5d9e5b66d7b8aad8138d801135cee922d04e7ae6f9ac8e2bf9f2023803db75524432bb118f9e7a21e709d6c8bca8597c539b9370d5855f99a56d5fae200f20"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x305082, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000001c0)={0xd56a, 0x1, 0xe23, 0x981d, 0x1, "d640283f4bbc2ddcc419cd6fa446ed27edb220", 0x7}) [ 976.851791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 976.891674] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0xd84, 0x9, 0xff}, {0xec, 0x7, 0x1f, 0xfffffffc}, {0x4, 0x3, 0x1, 0xcb000000}, {0x100, 0x0, 0x1, 0x3}, {0x101, 0x5, 0x6a, 0x6582}, {0x8, 0x48, 0x0, 0x3f}, {0x808, 0x80, 0x7f, 0x2}]}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 02:32:51 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800004103804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 976.986396] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 976.995921] minix_free_inode: bit 1 already cleared [ 977.048732] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 977.071279] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 977.075117] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 977.091169] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 977.095541] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 977.105162] minix_free_inode: bit 1 already cleared 02:32:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00ffffa88800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:51 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000500)="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", 0x398, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) syncfs(r0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x800, 0x3) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) [ 977.146371] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 977.155255] EXT4-fs (loop1): mount failed [ 977.215136] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00ffffff9e00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 977.288634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:51 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:32:51 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x3dd88) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x202781, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000000c0)={0x0, 0x20}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x5a2c) lseek(r2, 0x0, 0x3) connect(r2, &(0x7f0000000100)=@in={0x2, 0x4e20, @local}, 0x80) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)={0x2b, 0x4, [], [@enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0xffffffff}]}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) r4 = dup(r3) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x100, 0xb33, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "abd0d88b9828a462059829e53521a2e237a514a85db47edf0dd71d0647e26131e22e1801e3d4365316d3c4b787eb39f18390c84f539f56928a47201b9799ec1f"}}, 0x80}, 0x1, 0x0, 0x0, 0x400c1}, 0x4000) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 977.392085] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 977.400174] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 977.436503] attempt to access beyond end of device [ 977.457016] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 977.459134] loop2: rw=0, want=80014, limit=52 [ 977.498918] Buffer I/O error on dev loop2, logical block 40006, async page read [ 977.512785] attempt to access beyond end of device [ 977.525382] loop2: rw=0, want=21012, limit=52 [ 977.533287] Buffer I/O error on dev loop2, logical block 10505, async page read [ 977.579162] attempt to access beyond end of device [ 977.584123] loop2: rw=0, want=120994, limit=52 [ 977.588930] Buffer I/O error on dev loop2, logical block 60496, async page read [ 977.596425] attempt to access beyond end of device [ 977.602176] loop2: rw=0, want=1284, limit=52 [ 977.606607] Buffer I/O error on dev loop2, logical block 641, async page read [ 977.614548] attempt to access beyond end of device [ 977.619663] loop2: rw=0, want=2952, limit=52 [ 977.624165] Buffer I/O error on dev loop2, logical block 1475, async page read [ 977.632516] attempt to access beyond end of device [ 977.633536] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 977.637453] loop2: rw=0, want=114584, limit=52 [ 977.637468] Buffer I/O error on dev loop2, logical block 57291, async page read [ 977.637508] attempt to access beyond end of device [ 977.637518] loop2: rw=0, want=9488, limit=52 [ 977.637528] Buffer I/O error on dev loop2, logical block 4743, async page read 02:32:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x1c) 02:32:51 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000001f3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000006d900000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 977.788840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 977.810780] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 977.833710] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:32:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00fffffff000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:32:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@hyper}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000100", @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000200ffffac1e000108000a0000000000060002000100000014001f00"/86], 0x5c}}, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r4, 0x101, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000004) getsockopt$inet_dccp_int(r1, 0x21, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x128, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8795}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb21}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc85d}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x60}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x23}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4260}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45c7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x1, 0x27, "0bd5b2a5c3982c6eeacebeb800752b25868aed4fe42b64fef51c2f934df650ce3895cff3577d9c"}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000000)={@my=0x0}) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x1) [ 977.863150] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:32:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000fffe00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 977.913227] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 977.914783] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 977.936269] EXT4-fs (loop1): mount failed 02:32:52 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000203804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:32:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000fff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 978.156094] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 978.236570] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1043.021014] MINIX-fs: block_to_path: block 3306822 too big on dev loop2 [ 1043.027929] MINIX-fs: block_to_path: block 3306823 too big on dev loop2 [ 1043.035048] MINIX-fs: block_to_path: block 3306824 too big on dev loop2 [ 1043.042985] MINIX-fs: block_to_path: block 3306825 too big on dev loop2 [ 1043.049863] MINIX-fs: block_to_path: block 3306826 too big on dev loop2 [ 1043.056825] MINIX-fs: block_to_path: block 3306827 too big on dev loop2 [ 1043.063942] MINIX-fs: block_to_path: block 3306828 too big on dev loop2 [ 1043.070771] MINIX-fs: block_to_path: block 3306829 too big on dev loop2 [ 1043.077745] MINIX-fs: block_to_path: block 3306830 too big on dev loop2 [ 1043.084732] MINIX-fs: block_to_path: block 3306831 too big on dev loop2 [ 1048.020779] block_to_path: 374468 callbacks suppressed [ 1048.020787] MINIX-fs: block_to_path: block 3681300 too big on dev loop2 [ 1048.033029] MINIX-fs: block_to_path: block 3681301 too big on dev loop2 [ 1048.039915] MINIX-fs: block_to_path: block 3681302 too big on dev loop2 [ 1048.046837] MINIX-fs: block_to_path: block 3681303 too big on dev loop2 [ 1048.053975] MINIX-fs: block_to_path: block 3681304 too big on dev loop2 [ 1048.060902] MINIX-fs: block_to_path: block 3681305 too big on dev loop2 [ 1048.068685] MINIX-fs: block_to_path: block 3681306 too big on dev loop2 [ 1048.075612] MINIX-fs: block_to_path: block 3681307 too big on dev loop2 [ 1048.082660] MINIX-fs: block_to_path: block 3681308 too big on dev loop2 [ 1048.089496] MINIX-fs: block_to_path: block 3681309 too big on dev loop2 [ 1049.884302] attempt to access beyond end of device [ 1049.889378] loop2: rw=0, want=80014, limit=52 [ 1049.893965] Buffer I/O error on dev loop2, logical block 40006, async page read [ 1049.901730] attempt to access beyond end of device [ 1049.906700] loop2: rw=0, want=21012, limit=52 [ 1049.911381] Buffer I/O error on dev loop2, logical block 10505, async page read [ 1049.919195] attempt to access beyond end of device [ 1049.924866] loop2: rw=0, want=120994, limit=52 [ 1049.929618] Buffer I/O error on dev loop2, logical block 60496, async page read [ 1049.937301] attempt to access beyond end of device [ 1049.942600] loop2: rw=0, want=1284, limit=52 [ 1049.947069] Buffer I/O error on dev loop2, logical block 641, async page read [ 1049.954692] attempt to access beyond end of device [ 1049.960033] loop2: rw=0, want=80014, limit=52 [ 1049.965037] Buffer I/O error on dev loop2, logical block 40006, async page read [ 1049.973229] attempt to access beyond end of device [ 1049.978242] loop2: rw=0, want=21012, limit=52 [ 1049.982920] Buffer I/O error on dev loop2, logical block 10505, async page read [ 1049.990616] attempt to access beyond end of device [ 1049.995637] loop2: rw=0, want=120994, limit=52 [ 1050.000262] Buffer I/O error on dev loop2, logical block 60496, async page read [ 1050.007944] attempt to access beyond end of device [ 1050.013042] loop2: rw=0, want=1284, limit=52 [ 1050.017501] Buffer I/O error on dev loop2, logical block 641, async page read [ 1050.025424] attempt to access beyond end of device [ 1050.030449] loop2: rw=0, want=80014, limit=52 [ 1050.035107] Buffer I/O error on dev loop2, logical block 40006, async page read [ 1050.042938] attempt to access beyond end of device [ 1050.048061] loop2: rw=0, want=21012, limit=52 [ 1050.052732] Buffer I/O error on dev loop2, logical block 10505, async page read [ 1050.060321] attempt to access beyond end of device [ 1050.065413] loop2: rw=0, want=120994, limit=52 [ 1050.070172] attempt to access beyond end of device [ 1050.075468] loop2: rw=0, want=1284, limit=52 [ 1050.080305] attempt to access beyond end of device [ 1050.085444] loop2: rw=0, want=80014, limit=52 [ 1050.089984] attempt to access beyond end of device [ 1050.095103] loop2: rw=0, want=21012, limit=52 [ 1050.099641] attempt to access beyond end of device [ 1050.104699] loop2: rw=0, want=120994, limit=52 [ 1050.109309] attempt to access beyond end of device [ 1050.114547] loop2: rw=0, want=1284, limit=52 02:34:04 executing program 2: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x94, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) 02:34:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0088a8ffff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:34:04 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x23000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:34:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x10000, 0x1000, &(0x7f0000000180)=""/4096}]}) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@host}) 02:34:04 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000223804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:34:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1050.443077] attempt to access beyond end of device [ 1050.448397] loop2: rw=0, want=80014, limit=52 [ 1050.481374] attempt to access beyond end of device [ 1050.487865] nla_parse: 3 callbacks suppressed 02:34:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x1c) 02:34:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000f0ffff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1050.487874] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1050.514310] loop2: rw=0, want=21012, limit=52 [ 1050.518979] attempt to access beyond end of device [ 1050.529025] loop2: rw=0, want=120994, limit=52 [ 1050.536926] attempt to access beyond end of device [ 1050.553467] loop2: rw=0, want=1284, limit=52 [ 1050.558372] attempt to access beyond end of device [ 1050.565077] loop2: rw=0, want=2952, limit=52 [ 1050.568487] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1050.573904] attempt to access beyond end of device [ 1050.608414] loop2: rw=0, want=114584, limit=52 [ 1050.629179] attempt to access beyond end of device [ 1050.644649] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1050.648024] loop2: rw=0, want=9488, limit=52 [ 1050.667784] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:34:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@local}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1050.706097] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1050.745346] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1050.774847] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1050.785023] EXT4-fs (loop1): mount failed 02:34:05 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2c000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:34:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.current\x00', 0x275a, 0x0) lseek(r2, 0x0, 0x3) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x20014041) ptrace$cont(0x9, r3, 0x0, 0x0) ptrace$cont(0x7, r3, 0x531, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r4, 0x0) setfsgid(r4) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x8, 0x4, 0x3}, 0x2}}, 0x18) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000180)={{0x1, 0x0, @descriptor="dc4aadf7856a6dca"}, 0x3c, [], "bb523f76e78d8f0f76c41fe47c35083598da890864b028749d5fedc5dbe819101053a6dff00b4a5301c9da12eecbc8dc89e525853953272ddc985928"}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000240)={@loopback, @rand_addr=0x64010100, r5}, 0xc) [ 1051.206868] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1051.247089] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1051.279937] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:34:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x298001) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x200, 0x0) readahead(r1, 0x5, 0x1) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000280)={{0x2, 0x4e22, @private=0xa010101}, {0x306, @remote}, 0x2, {0x2, 0x4e22, @private=0xa010100}, 'netdevsim0\x00'}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x0}) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x284800, &(0x7f0000000200)={[{@nfs_export_off='nfs_export=off'}, {@xino_on='xino=on'}, {@index_on='index=on'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_off='metacopy=off'}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@measure='measure'}, {@dont_appraise='dont_appraise'}]}) [ 1051.325213] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1051.332923] EXT4-fs (loop1): mount failed [ 1051.510821] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1052.016809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.028973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.050171] device bridge_slave_1 left promiscuous mode [ 1052.070184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.117101] device bridge_slave_0 left promiscuous mode [ 1052.122814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.186050] device veth1_macvtap left promiscuous mode [ 1052.191931] device veth0_macvtap left promiscuous mode [ 1052.197258] device veth1_vlan left promiscuous mode [ 1052.204552] device veth0_vlan left promiscuous mode [ 1052.397065] device hsr_slave_1 left promiscuous mode [ 1052.454504] device hsr_slave_0 left promiscuous mode [ 1052.505625] team0 (unregistering): Port device team_slave_0 removed [ 1074.245620] block_to_path: 134477 callbacks suppressed [ 1074.245628] MINIX-fs: block_to_path: block 3306822 too big on dev loop2 [ 1074.258285] MINIX-fs: block_to_path: block 3306823 too big on dev loop2 [ 1074.265131] MINIX-fs: block_to_path: block 3306824 too big on dev loop2 [ 1074.272048] MINIX-fs: block_to_path: block 3306825 too big on dev loop2 [ 1074.279015] MINIX-fs: block_to_path: block 3306826 too big on dev loop2 [ 1074.285839] MINIX-fs: block_to_path: block 3306827 too big on dev loop2 [ 1074.292745] MINIX-fs: block_to_path: block 3306828 too big on dev loop2 [ 1074.299685] MINIX-fs: block_to_path: block 3306829 too big on dev loop2 [ 1074.306512] MINIX-fs: block_to_path: block 3306830 too big on dev loop2 [ 1074.313402] MINIX-fs: block_to_path: block 3306831 too big on dev loop2 [ 1075.025923] attempt to access beyond end of device [ 1075.031088] loop2: rw=0, want=80014, limit=52 [ 1075.035585] buffer_io_error: 13 callbacks suppressed [ 1075.035591] Buffer I/O error on dev loop2, logical block 40006, async page read [ 1075.048401] attempt to access beyond end of device [ 1075.053396] loop2: rw=0, want=21012, limit=52 [ 1075.058071] Buffer I/O error on dev loop2, logical block 10505, async page read [ 1075.065633] attempt to access beyond end of device [ 1075.074025] loop2: rw=0, want=120994, limit=52 [ 1075.078764] Buffer I/O error on dev loop2, logical block 60496, async page read [ 1075.086395] attempt to access beyond end of device [ 1075.091603] loop2: rw=0, want=1284, limit=52 [ 1075.096156] Buffer I/O error on dev loop2, logical block 641, async page read [ 1075.103673] attempt to access beyond end of device [ 1075.108787] loop2: rw=0, want=2952, limit=52 [ 1075.113267] Buffer I/O error on dev loop2, logical block 1475, async page read [ 1075.120848] attempt to access beyond end of device [ 1075.125865] loop2: rw=0, want=114584, limit=52 [ 1075.130602] Buffer I/O error on dev loop2, logical block 57291, async page read [ 1075.138273] attempt to access beyond end of device [ 1075.143265] loop2: rw=0, want=9488, limit=52 [ 1075.147988] Buffer I/O error on dev loop2, logical block 4743, async page read [ 1097.168240] block_to_path: 508955 callbacks suppressed [ 1097.168247] MINIX-fs: block_to_path: block 3306822 too big on dev loop2 [ 1097.182362] MINIX-fs: block_to_path: block 3306823 too big on dev loop2 [ 1097.189641] MINIX-fs: block_to_path: block 3306824 too big on dev loop2 [ 1097.196909] MINIX-fs: block_to_path: block 3306825 too big on dev loop2 [ 1097.203655] MINIX-fs: block_to_path: block 3306826 too big on dev loop2 [ 1097.211292] MINIX-fs: block_to_path: block 3306827 too big on dev loop2 [ 1097.218647] MINIX-fs: block_to_path: block 3306828 too big on dev loop2 [ 1097.225402] MINIX-fs: block_to_path: block 3306829 too big on dev loop2 [ 1097.233289] MINIX-fs: block_to_path: block 3306830 too big on dev loop2 [ 1097.240849] MINIX-fs: block_to_path: block 3306831 too big on dev loop2 [ 1097.944463] attempt to access beyond end of device [ 1097.949483] loop2: rw=0, want=80014, limit=52 [ 1097.954039] Buffer I/O error on dev loop2, logical block 40006, async page read [ 1097.961764] attempt to access beyond end of device [ 1097.966902] loop2: rw=0, want=21012, limit=52 [ 1097.971465] Buffer I/O error on dev loop2, logical block 10505, async page read [ 1097.979109] attempt to access beyond end of device [ 1097.984240] loop2: rw=0, want=120994, limit=52 [ 1097.989022] Buffer I/O error on dev loop2, logical block 60496, async page read [ 1097.996788] attempt to access beyond end of device [ 1098.001823] loop2: rw=0, want=1284, limit=52 [ 1098.006373] Buffer I/O error on dev loop2, logical block 641, async page read [ 1098.013746] attempt to access beyond end of device [ 1098.018854] loop2: rw=0, want=2952, limit=52 [ 1098.023324] Buffer I/O error on dev loop2, logical block 1475, async page read [ 1098.030820] attempt to access beyond end of device [ 1098.035919] loop2: rw=0, want=114584, limit=52 [ 1098.040569] Buffer I/O error on dev loop2, logical block 57291, async page read [ 1098.048199] attempt to access beyond end of device [ 1098.053222] loop2: rw=0, want=9488, limit=52 [ 1098.057768] Buffer I/O error on dev loop2, logical block 4743, async page read [ 1119.723344] block_to_path: 508955 callbacks suppressed [ 1119.723351] MINIX-fs: block_to_path: block 3306822 too big on dev loop2 [ 1119.735597] MINIX-fs: block_to_path: block 3306823 too big on dev loop2 [ 1119.742352] MINIX-fs: block_to_path: block 3306824 too big on dev loop2 [ 1119.749334] MINIX-fs: block_to_path: block 3306825 too big on dev loop2 [ 1119.756167] MINIX-fs: block_to_path: block 3306826 too big on dev loop2 [ 1119.763020] MINIX-fs: block_to_path: block 3306827 too big on dev loop2 [ 1119.769930] MINIX-fs: block_to_path: block 3306828 too big on dev loop2 [ 1119.776864] MINIX-fs: block_to_path: block 3306829 too big on dev loop2 [ 1119.783776] MINIX-fs: block_to_path: block 3306830 too big on dev loop2 [ 1119.790716] MINIX-fs: block_to_path: block 3306831 too big on dev loop2 [ 1145.946897] IPVS: ftp: loaded support on port[0] = 21 [ 1146.052428] chnl_net:caif_netlink_parms(): no params data found [ 1146.200592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.207072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.215775] device bridge_slave_0 entered promiscuous mode [ 1146.223582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.230056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.238282] device bridge_slave_1 entered promiscuous mode [ 1146.260239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1146.269397] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1146.290341] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1146.297805] team0: Port device team_slave_0 added [ 1146.303940] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1146.311782] team0: Port device team_slave_1 added [ 1146.330619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.336996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.362425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.374308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.380651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.406216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.422235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1146.430000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1146.485535] device hsr_slave_0 entered promiscuous mode [ 1146.531746] device hsr_slave_1 entered promiscuous mode [ 1146.571854] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1146.579438] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1146.665906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.672345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.678936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.685396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.720526] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1146.726982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.737455] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1146.748849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1146.757744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.765339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.773699] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1146.787366] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1146.793898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.815205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1146.823257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.829602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.846501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1146.854311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.860655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.877093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1146.884797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1146.910043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1146.919980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1146.931106] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1146.938659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1146.946867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1146.954721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1146.963280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1146.977522] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1146.986235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1146.994363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1147.006666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.024288] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1147.036712] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1147.044756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1147.053932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1147.096143] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1147.103949] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1147.110607] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1147.124331] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1147.131817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1147.139494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1147.148954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1147.156710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1147.166895] device veth0_vlan entered promiscuous mode [ 1147.178587] device veth1_vlan entered promiscuous mode [ 1147.184980] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1147.199179] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1147.214593] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1147.224192] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1147.231196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1147.238450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1147.246744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1147.255105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1147.266977] device veth0_macvtap entered promiscuous mode [ 1147.273949] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1147.284807] device veth1_macvtap entered promiscuous mode [ 1147.291959] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1147.302580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1147.313723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1147.324356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.334429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.344886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.355115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.364941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.375177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.385058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.395388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.405141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.415356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.426786] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1147.434326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.442288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1147.449550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1147.457521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1147.465809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1147.481970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.492760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.502441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.512348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.521589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.531418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.540618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.550755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.560002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.569903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.580379] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1147.587914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.595829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1147.604222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:35:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x1c) 02:35:42 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2d000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:42 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000233804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff007fffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000100)={0x3, 0x0, 0x1, {0x6, 0x3, 0x3f}}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000000c0)=""/10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1147.736190] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1147.747701] attempt to access beyond end of device [ 1147.753379] loop2: rw=2049, want=6434, limit=52 [ 1147.758294] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1147.831498] minix_free_inode: bit 1 already cleared 02:35:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x0, 0x30}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r2, 0xee, "808a543c1ce8ecb1c69f6e81cb92130ae50205f1822c512fa8287027cfd93611b5b568799f17c30b021a435812d50ff4355ad90faf2c56943a145646d3d888c1caa551bb911072c146d99027e967e534dc8279b4c4a0fe8fd98bb8eb28089f6dc70f7e5a2d772e4ad0c6cf23bc727e8b295c1a85ae2d8251d3bb6993d33ef0b7c4ce5c6b45e1a53cea5d918111cbf23aa53fb063d8dbe6dc7461042129eb383df8af4ee702e9bb8a067cc0b4063940bd54ce352051465ec0a81f206978311965be26c2f61dc3793eb23fdaf85eb258fbdf3960f1e37e75d982a603fce6496e46dde940c32e5e8bb68d2974f3cefa"}, &(0x7f0000000300)=0xf6) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x121080, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000400)) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000003c0)={0x1f, 0x6f, &(0x7f0000000340)="b2b568d52d6ab50b8bc9cc2a9fcc2f1d32c079f16cafe8bb2b66d17352e7b2c7e2011cc574e529acdb28757c0e981e7215c1dd6b54f345c209e7a4d30f7933c7445882e033c409d801d17268e65d1d06de88cbe6c594c223561fc6197d12aac6e99ffc734f000032781c654c9e22aa"}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2a0100, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f00000001c0)) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:35:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff009effffff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1147.852385] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1147.933224] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1147.956762] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1147.972781] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1148.014179] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.021590] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1148.034792] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1148.055262] EXT4-fs (loop1): corrupt root inode, run e2fsck 02:35:42 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000002c3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00f0ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1148.067210] EXT4-fs (loop1): mount failed 02:35:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000080)={0x0, "6b8674c08ac2eccea2c7c3955a90f4e72e38ec49f4a6c7d50bb1d76beed6024e", 0x0, 0x4, 0x3, 0x40004, 0x1040000, 0x8}) 02:35:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1148.168458] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.204086] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000034000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1148.259932] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.298539] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1148.323200] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1148.326060] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1148.348362] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1148.358531] EXT4-fs: failed to create workqueue [ 1148.368951] EXT4-fs (loop1): mount failed [ 1148.374866] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x1c) 02:35:42 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000002d3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00fffffffffffff000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:42 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3f000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setflags(r3, 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) socket$isdn_base(0x22, 0x3, 0x0) lseek(r3, 0x100000001, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x110001) preadv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/165, 0xa5}, {&(0x7f0000000380)=""/186, 0xba}, {&(0x7f0000000440)=""/169, 0xa9}, {&(0x7f0000000500)=""/172, 0xac}, {&(0x7f00000005c0)=""/49, 0x31}], 0x5, 0xaf) lseek(r5, 0x0, 0x3) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000a67f671da99895b5090029d62ef03cdf0edcd1554b5ca962200148ed33e4c7a6e800000000000000000000000000000089a87329a9d8b60076d2866ece2b7c"], &(0x7f0000000280)=0x4b) getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername(r2, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80) [ 1148.721849] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.783238] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1148.873302] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1148.876338] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1148.913233] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:35:43 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x5) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:35:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000001000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1148.931119] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1148.948469] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1148.954554] EXT4-fs (loop1): mount failed 02:35:43 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000003f3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000080)={0x8, @raw_data="f38eb41a9836b78abdbea96d0e278053bd9750272d686e01f62bf9524df14c0c827a6882e7ae82dab06a821398d5e52cceed2c40c2d01bf0e3d045fef82369ba79a845c72ac8c0b2cd0c3d444ca9ccd38c12ffb75db75931057f7dbf9a31fce8a1399aae4b1aeb176aa88123a645e15b6f80250dc313c37ddcb5f796c80d977a6318dbb6e139aa730bd09e115ca4069664b7966f8804e0c98ab800fa51696b4f5767fc3d908d2fa1e0f2a4610b8a03f1647df33acb23344a309434ed9382992ec187b6eee44718f3"}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1149.026561] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1149.143661] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1149.169936] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1149.186860] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1149.194199] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1149.225922] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:35:43 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000403804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1149.249682] attempt to access beyond end of device [ 1149.251994] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1149.256075] loop2: rw=2049, want=6434, limit=52 [ 1149.277552] EXT4-fs: failed to create workqueue [ 1149.329838] EXT4-fs (loop1): mount failed [ 1149.348013] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1149.385123] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1149.415968] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1149.511758] minix_free_inode: bit 1 already cleared 02:35:43 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x1c) 02:35:43 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000100)={{0x9, 0xfc}, {0x5, 0x1}, 0x3, 0x1, 0x3f}) 02:35:43 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00200803b900cda40ff1ad5c98f139aea044610e6914ae109ca2d17f8e37a2a1cede4ae07d62e0363ce6377a530accde56a0d7a9ce30437bde83c50d282df27011419fe0a26de051f1473c1ab750f012f11b596f9646eeb8ba7d5c09b77aedd702bfa2101bea02ca757cf1e9524ff27", 0x73, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x4}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:35:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:43 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000483804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000005000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1149.631451] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1149.692315] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1149.700348] MINIX-fs: bad superblock or unable to read bitmaps [ 1149.749385] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f00000000c0)='./file0\x00', 0x412, 0x3, &(0x7f0000001200)=[{&(0x7f00000012c0)="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", 0x100e, 0x5aa0}, {&(0x7f0000000100)="6502388c", 0x4, 0x3}, {&(0x7f0000000180)="44f688ece564d27b0cfacf8d12e95cf56d4c9bc782bc9335ff42d8adaa3761d577624094b783c240a26cc6c17cf0726449dea728a2822e32c7fbc7ef752dbf28e12ce6f6cc2722467d5bc6c433028fb8235b79e727acd95908ff3518b9ce1e3efb41874a3639d90cb7a3a63f7f6c662918bbca6c442d345bdfc69cc99264ce5aa0924c11f545c320298f4bb7916df8fb71be8dbba25b2c3fce7fc1495ba1ba60abe2843a33a601979fbd1b0c333f553f2e81af824605dce54f833128917961851ede30bd20641ae46582f56f93bbab397ccf01307a", 0xd5, 0x1}], 0x208000, &(0x7f0000000280)={[{@user_xattr='user_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x7}}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 02:35:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000006000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:44 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x2000000000009}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) lseek(r0, 0x0, 0x3) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000001c0)={0x4, "8a8c4189ce7d5bc7db90ccedacbc6a32a7dd1d146af3063eec2f62e94e3d8158", 0x1, 0x4, 0x7, 0x7, 0x10, 0x3, 0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) fremovexattr(r1, &(0x7f0000000340)=@known='user.syz\x00') creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r3, r5) 02:35:44 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000004c3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1149.878070] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1149.909003] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:35:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1149.933538] erofs: read_super, device -> /dev/loop4 [ 1149.944811] erofs: options -> user_xattr,fault_injection=0x0000000000000007,acl,nouser_xattr, [ 1149.949703] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1149.967136] erofs: cannot find valid erofs superblock [ 1149.977094] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1149.983400] EXT4-fs (loop1): mount failed [ 1150.003974] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1150.014006] minix_free_inode: bit 1 already cleared [ 1150.028446] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1150.145619] erofs: read_super, device -> /dev/loop4 [ 1150.150928] erofs: options -> user_xattr,fault_injection=0x0000000000000007,acl,nouser_xattr, [ 1150.162541] erofs: cannot find valid erofs superblock [ 1150.178673] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1150.188962] minix_free_inode: bit 1 already cleared [ 1150.211684] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:44 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x60000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:44 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x1c) 02:35:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xa1, 0x6, 0x9, "5b7a6df1ab7297cb18f3746e5ed2fde6", "19924b8bcd4268a00ffc09160e18d80d04f253acc21c86590f49d66b12b1ecb42c559c62560af056dd6c9ce014d9fe58ef4be923503e6e0c1d0f329c8e918b863fa15ae66932ca128eea00488f1e6cbed0f65a10d042d67c29e9912e5e9838c32e46797aedfc0bbb80a8028315c5bb025098807dc4c50d079df96d3f10f9f2d5588252671786923fa3ac516b"}, 0xa1, 0x3) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x43, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) 02:35:44 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000603804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:44 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x28, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x250, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcaf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff22}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x300000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc9cf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x25}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) 02:35:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000000000c000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1150.595538] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1150.607864] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1150.646813] Enabling of bearer rejected, failed to enable media 02:35:45 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000683804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000000000e000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:45 executing program 4: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1150.731455] attempt to access beyond end of device [ 1150.736913] loop2: rw=2049, want=6434, limit=52 [ 1150.759006] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1150.772263] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:35:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000000000f000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1150.811456] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1150.835813] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:45 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1150.871977] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1150.931194] minix_free_inode: bit 1 already cleared [ 1150.944272] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1150.950166] EXT4-fs (loop1): mount failed [ 1151.084782] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1151.094285] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1151.107882] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1151.123623] EXT4-fs: failed to create workqueue [ 1151.128902] EXT4-fs (loop1): mount failed 02:35:45 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000006c3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1151.133372] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1151.240945] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1151.249216] attempt to access beyond end of device [ 1151.265524] loop2: rw=2049, want=6434, limit=52 [ 1151.290302] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:35:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 02:35:45 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6b6b6b00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000010000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:45 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000743804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:45 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x8000}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:35:45 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x1c) [ 1151.371343] minix_free_inode: bit 1 already cleared 02:35:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000020000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000000003f000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1151.506269] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x35648a8135f822d0, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x3c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2005}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1151.589103] MINIX-fs: bad superblock or unable to read bitmaps [ 1151.634185] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1151.643714] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1151.654268] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1151.666490] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1151.673733] EXT4-fs (loop1): mount failed [ 1151.690940] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1151.709941] MINIX-fs: bad superblock or unable to read bitmaps 02:35:46 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000007a3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000048000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:46 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x800, 0xfffffff7, {0x0, 0xea60}, {0x3, 0xc, 0x5, 0x4, 0x6, 0x2f, "59bf7fd5"}, 0x3, 0x2, @planes=&(0x7f00000000c0)={0x5, 0x3, @fd, 0x7f}, 0x2, 0x0, r0}) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000240)=0xfffffffe, 0x4) 02:35:46 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8cffffff, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0xa, 0x0, [{0x171}, {0x2d5, 0x0, 0x2}, {0xbda, 0x0, 0x8}, {0x3f2, 0x0, 0x2}, {0xb04, 0x0, 0x9}, {0x27b, 0x0, 0x3}, {0xaea, 0x0, 0x9}, {0x8c3, 0x0, 0x7}, {0xb79, 0x0, 0x1}, {0x878, 0x0, 0x28}]}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 02:35:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000000004c000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1151.944828] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1152.001908] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1152.003439] attempt to access beyond end of device [ 1152.045256] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1152.056481] loop2: rw=2049, want=6434, limit=52 [ 1152.067429] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1152.073702] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1152.081905] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1152.097648] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1152.109417] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1152.116341] EXT4-fs (loop1): mount failed [ 1152.154503] kauditd_printk_skb: 508955 callbacks suppressed [ 1152.154515] audit: type=1800 audit(1590028546.408:270): pid=7725 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=15986 res=0 [ 1152.241555] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1152.251190] minix_free_inode: bit 1 already cleared [ 1152.264294] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:35:46 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x1c) 02:35:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000060000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:46 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800003fa3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@my=0x0}) [ 1152.294555] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1152.316789] EXT4-fs: failed to create workqueue [ 1152.346565] EXT4-fs (loop1): mount failed 02:35:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000005865000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:46 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1152.392281] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000068000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:46 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80000fff3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1152.469248] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:46 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x18000, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x2, {0x100, 0x1, 0x8, 0x7}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@local}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x1bb400, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) clock_gettime(0x0, &(0x7f0000000100)) r5 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x100, 0x408000) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000280)=0x1ff, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0x0, 0x110001) lseek(r6, 0x0, 0x3) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000002c0)=0x9) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x4, 0x2, 0x2}}, 0x14) 02:35:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000000006c000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1152.640074] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1152.659571] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1152.681239] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1152.695626] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1152.725222] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1152.736542] EXT4-fs (loop1): mount failed [ 1152.745002] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:47 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000000a04000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000074000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1152.945948] nla_parse: 17 callbacks suppressed [ 1152.945958] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1152.952566] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1153.036172] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x1c) 02:35:47 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf5ffffff, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'gre0\x00', {0x10000}, 0xf098}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 02:35:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:47 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000023804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1153.271913] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000081000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1153.363392] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x134, 0x3, 0x1, 0x3, 0x0, 0x0, {0xc}, [@CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) 02:35:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000ffffa888000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1153.447470] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1153.483357] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1153.498200] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1153.543778] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1153.558237] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1153.578529] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000ffffff9e000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:47 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000033804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1153.609410] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1153.617049] EXT4-fs (loop1): mount failed 02:35:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000006d9000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1153.695949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:48 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf6ffffff, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1153.793342] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1153.828603] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1153.983952] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1154.006515] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1154.033868] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1154.090822] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1154.105637] EXT4-fs (loop1): mount failed 02:35:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x1c) 02:35:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000000c0)={'veth0_to_team\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 02:35:48 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000043804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000fffffff0000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1154.199397] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1154.221197] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1154.230506] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1154.262817] EXT4-fs: failed to create workqueue [ 1154.282032] EXT4-fs (loop1): mount failed [ 1154.298822] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:48 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xfbffffff, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000000fffe000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1154.390834] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:48 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000053804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000080)) [ 1154.546956] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000fff000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1154.644790] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1154.677604] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:49 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000063804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000007fffffff000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1154.720064] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1154.743788] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:35:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x7fff, 0xfff, 0x2, 0x80000001}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) r3 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x75dd, 0x80c1) dup3(r2, r3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1154.785722] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1154.840480] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1154.853341] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1154.862353] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1154.875460] EXT4-fs (loop1): mount failed [ 1154.975892] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x1c) 02:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000ffffffff000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:49 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000073804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:49 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xfeffffff, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:49 executing program 4: getrusage(0x1, &(0x7f0000000080)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1155.247999] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:49 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000093804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000f0ffffffffffff000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 02:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1155.403285] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1155.487428] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1155.512608] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1155.522616] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000003000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1155.543362] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1155.568327] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1155.574560] EXT4-fs (loop1): mount failed 02:35:49 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000223804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1155.747455] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1155.771210] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1155.795063] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1155.840269] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1155.856740] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1155.887802] EXT4-fs: failed to create workqueue [ 1155.906017] EXT4-fs (loop1): mount failed 02:35:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}, 0x1c) 02:35:50 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xff0f0000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x310001) lseek(r2, 0x0, 0x3) recvfrom(r2, &(0x7f0000000300)=""/175, 0xaf, 0x40, &(0x7f0000000140)=@x25={0x9, @remote={[], 0x1}}, 0x80) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000001c0)={'veth0_to_batadv\x00', 0x1}) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x9, 0xa, 0x4, 0x800, 0x7, {0x77359400}, {0x1, 0x1, 0x20, 0x0, 0x0, 0xf7, '\'\"$X'}, 0xbe3, 0x3, @offset=0x7, 0x6, 0x0, 0xffffffffffffffff}) bind$bt_sco(r4, &(0x7f0000000100)={0x1f, @fixed={[], 0x2}}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x110001) lseek(r5, 0x0, 0x3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x660, 0x5}) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0)) 02:35:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:50 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000233804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000006000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1156.342477] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1156.379285] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:35:50 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000002c3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000007000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1156.454944] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1156.502836] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1156.540525] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1156.550577] EXT4-fs (loop1): mount failed [ 1156.574671] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000a000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:51 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000002d3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1156.693133] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1156.731461] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:35:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000c000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1156.774187] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1156.808878] EXT4-fs: failed to create workqueue 02:35:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x50040, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) lseek(r2, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000000c0)=0x3) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1156.833007] EXT4-fs (loop1): mount failed [ 1156.837284] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x1c) 02:35:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000e000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:51 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000483804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:51 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xffff1f00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)) 02:35:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000f000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1157.167343] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1157.266671] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:51 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000004c3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000048000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:51 executing program 4: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x8004000000000000) 02:35:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00004c000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1157.420888] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1157.430150] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1157.439179] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1157.505826] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000060000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1157.556540] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1157.569989] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1157.585777] EXT4-fs (loop1): mount failed [ 1157.616027] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1157.634071] attempt to access beyond end of device [ 1157.652350] loop4: rw=2049, want=6434, limit=52 [ 1157.663776] Buffer I/O error on dev loop4, logical block 3216, lost async page write [ 1157.771975] minix_free_inode: bit 1 already cleared [ 1157.832287] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1157.847361] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1157.858638] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:35:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 02:35:52 executing program 4: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1000000000000) [ 1157.885367] EXT4-fs: failed to create workqueue [ 1157.899744] EXT4-fs (loop1): mount failed 02:35:52 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xffffff8c, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:52 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000603804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000068000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1157.982075] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1158.035676] nla_parse: 17 callbacks suppressed [ 1158.035687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1158.074366] attempt to access beyond end of device 02:35:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00006c000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x1c) [ 1158.094107] loop4: rw=2049, want=6434, limit=52 [ 1158.099220] Buffer I/O error on dev loop4, logical block 3216, lost async page write [ 1158.120569] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_to_team\x00'}) syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@sbsector={'sbsector', 0x3d, 0xffffffffffffffc1}}]}) 02:35:52 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000683804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000074000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1158.241531] minix_free_inode: bit 1 already cleared [ 1158.261616] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1158.343209] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1158.381211] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1158.403082] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1158.435649] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1158.443887] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1158.476832] ISOFS: Unable to identify CD-ROM format. 02:35:52 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000006c3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00007a000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1158.505539] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1158.514271] EXT4-fs (loop1): mount failed 02:35:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000f0000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:52 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xfffffff5, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1158.626038] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1158.662994] ISOFS: Unable to identify CD-ROM format. 02:35:53 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000180)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000140)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000001c0)) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 1158.733968] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1158.794435] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000030000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1158.855697] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:53 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000743804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1158.920309] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000050000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1159.036870] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:35:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x1c) [ 1159.093058] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1159.130223] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1159.145939] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1159.154802] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:35:53 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000007a3804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1159.222679] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1159.233679] EXT4-fs (loop1): mount failed [ 1159.300562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000d9060000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1159.355527] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1159.373010] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1159.414813] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1159.448970] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:35:53 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000005404000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1159.471083] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1159.497302] EXT4-fs: failed to create workqueue [ 1159.541412] EXT4-fs (loop1): mount failed 02:35:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:53 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xfffffff6, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1159.581239] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1159.642882] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1159.748089] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:54 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000000a04000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1159.882916] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1159.921649] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:35:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000380)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x14107e, 0x0) write$binfmt_elf32(r2, &(0x7f0000000bc0)=ANY=[], 0x801) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x2000}, 0xc) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24048010}, 0x1000d) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000840) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48014}, 0x20000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) fsetxattr$security_ima(r4, 0x0, 0x0, 0x0, 0x0) 02:35:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000e0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1159.954308] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1159.982472] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1160.030767] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1160.048776] EXT4-fs (loop1): mount failed 02:35:54 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x1c) 02:35:54 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000005404000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1160.187838] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1160.219626] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:54 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x77b896d5, 0x0, 0x1, 0xf01}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000240)={r2, 0x7}) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1160.254070] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1160.289878] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:35:54 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003802000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1160.319245] EXT4-fs: failed to create workqueue [ 1160.327548] EXT4-fs (loop1): mount failed [ 1160.353027] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:35:54 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffb, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1160.406390] attempt to access beyond end of device [ 1160.421495] loop2: rw=2049, want=6434, limit=52 02:35:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000003f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1160.449447] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1160.451100] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1160.580444] audit: type=1804 audit(1590028554.839:271): pid=8335 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir570480592/syzkaller.y6Ejnw/1007/file0/file0" dev="loop4" ino=14 res=1 02:35:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1160.648811] audit: type=1804 audit(1590028554.879:272): pid=8335 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir570480592/syzkaller.y6Ejnw/1007/file0/file0" dev="loop4" ino=14 res=1 02:35:54 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x1c0, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2480005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x2c}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008849}, 0x20008010) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:35:54 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003803000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:55 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x80) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000100)=""/51) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2480005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4004841) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="28faa9a0adadd2"], 0x4d) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xe0200, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1160.740453] minix_free_inode: bit 1 already cleared [ 1160.824462] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1160.824856] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1160.845337] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1160.864268] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1160.900078] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1160.906114] EXT4-fs (loop1): mount failed [ 1160.915665] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1160.958496] attempt to access beyond end of device [ 1160.964114] loop2: rw=2049, want=6434, limit=52 [ 1160.968847] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:35:55 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x1c) 02:35:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1161.043823] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x81084, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x9, 0x0, 0x8, 0x9, 0xd19f, 0x1}) add_key(&(0x7f0000000040)='blacklist\x00', 0x0, &(0x7f0000000280)="3787e9d79f3d518d8c08d3e3fae2ddb19c470f60b33e85bb9d3f911e760585f3cfe70952895edbe5814687ae341e9f57eef7dcdfea29e8bf", 0x38, 0xfffffffffffffffe) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380)="ab130005258bdaec910b9088d6fae452af105368887a0ddcf772856a2d3fa47087772d2967040ee7dca94a295e217dc30a56f499b3146845866256634e9d7f989bc80ae48a87b1f6b0b4186682852d1641b777743cefc868f8e0c22e93abab3b6bac205e183a932959d851c88c5ad9e299e1232020e8b7e8679247c70635ad06205741d9f33149fc00a06d29399956804a72098b15f3e496dbc6c648abe5d63275464d41416af0ddb61c20e1a417f285dbb42f900259a8541649605cb1a2c1ce92342b813471f049f2", 0xc9) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000480)) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0400fc60100002400c000200053582c137153e370900098005001d00d1bd", 0x2e}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000100)=[{{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}, 0x2}], 0x1, 0x40, 0x0) sendfile(r0, r0, 0x0, 0x24000000) open(&(0x7f0000000740)='./bus\x00', 0x151042, 0x89) 02:35:55 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 02:35:55 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003805000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1161.135536] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:35:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000004c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1161.179955] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1161.190407] minix_free_inode: bit 1 already cleared [ 1161.196020] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1161.206689] EXT4-fs: failed to create workqueue [ 1161.217808] EXT4-fs (loop1): mount failed 02:35:55 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffe, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000065580000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1161.268255] openvswitch: netlink: Flow key attribute not present in set flow. 02:35:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000600000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1161.410601] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1161.489431] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1161.504547] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:35:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000058650000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1161.547156] attempt to access beyond end of device [ 1161.583458] loop2: rw=2049, want=6434, limit=52 02:35:55 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003806000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1161.630497] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1161.651843] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:35:56 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x158, 0x9, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_ADT={0xac, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, [], 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={[], 0x3c}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, [], 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="5ae32220b81b"}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x20}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x24040000}, 0x20008814) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1161.705086] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1161.769896] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1161.781172] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1161.791332] minix_free_inode: bit 1 already cleared [ 1161.824928] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1161.831242] EXT4-fs (loop1): mount failed 02:35:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000680000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:56 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x1c) [ 1161.973320] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x81084, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x9, 0x0, 0x8, 0x9, 0xd19f, 0x1}) add_key(&(0x7f0000000040)='blacklist\x00', 0x0, &(0x7f0000000280)="3787e9d79f3d518d8c08d3e3fae2ddb19c470f60b33e85bb9d3f911e760585f3cfe70952895edbe5814687ae341e9f57eef7dcdfea29e8bf", 0x38, 0xfffffffffffffffe) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380)="ab130005258bdaec910b9088d6fae452af105368887a0ddcf772856a2d3fa47087772d2967040ee7dca94a295e217dc30a56f499b3146845866256634e9d7f989bc80ae48a87b1f6b0b4186682852d1641b777743cefc868f8e0c22e93abab3b6bac205e183a932959d851c88c5ad9e299e1232020e8b7e8679247c70635ad06205741d9f33149fc00a06d29399956804a72098b15f3e496dbc6c648abe5d63275464d41416af0ddb61c20e1a417f285dbb42f900259a8541649605cb1a2c1ce92342b813471f049f2", 0xc9) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000480)) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0400fc60100002400c000200053582c137153e370900098005001d00d1bd", 0x2e}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000100)=[{{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}, 0x2}], 0x1, 0x40, 0x0) sendfile(r0, r0, 0x0, 0x24000000) open(&(0x7f0000000740)='./bus\x00', 0x151042, 0x89) 02:35:56 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003807000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:56 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xedc000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1162.081548] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1162.112448] attempt to access beyond end of device 02:35:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000006c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1162.146366] loop2: rw=2049, want=6434, limit=52 [ 1162.164349] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1162.210122] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000740000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1162.290930] openvswitch: netlink: Flow key attribute not present in set flow. 02:35:56 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0='/dev/sr0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x2000002, &(0x7f0000000240)='minix\x00') creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1162.337559] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1162.384297] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1162.410964] minix_free_inode: bit 1 already cleared [ 1162.414801] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:35:56 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003810000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000007a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1162.583096] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1162.616125] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1162.622769] EXT4-fs (loop1): mount failed 02:35:56 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x0, 0xd6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}, {0x7fff, 0x2}, {0x0, 0x0, 0x7ff}, 0x0, 0x6e6bb0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@empty, 0x0, 0x3, 0x0, 0xfc}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) [ 1162.695208] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1162.752168] tmpfs: No value for mount option 'minix' 02:35:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000810000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1162.782173] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1162.790492] attempt to access beyond end of device [ 1162.795539] loop2: rw=2049, want=6434, limit=52 [ 1162.814837] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1162.846941] tmpfs: No value for mount option 'minix' [ 1162.875235] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:57 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x1c) 02:35:57 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:57 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000ac0)) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:35:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000006d90000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1162.930792] minix_free_inode: bit 1 already cleared 02:35:57 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003812000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000f00000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1163.078955] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1163.110741] attempt to access beyond end of device [ 1163.125607] loop2: rw=2049, want=6434, limit=52 [ 1163.131969] nla_parse: 19 callbacks suppressed [ 1163.132028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1163.142530] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1163.158645] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1163.158781] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000fffe0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1163.213300] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1163.275447] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1163.277149] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:35:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010102, @multicast1}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x800000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000240)={0x5d, 0x4, 0x98, 0xfffffffd}) 02:35:57 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f00000000c0)=0x1) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:35:57 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003814000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1163.368860] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1163.374936] EXT4-fs (loop1): mount failed [ 1163.379332] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1163.395462] minix_free_inode: bit 1 already cleared 02:35:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000fff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1163.433549] kvm [8559]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000006 data 0x1 [ 1163.448257] kvm [8559]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000005 data 0x0 [ 1163.457892] kvm [8559]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000004 data 0x1 [ 1163.502627] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @empty}, "219830e776539f121432408f86bd0c519cd7c9b62d1e04786a6109d8"}}}}, 0x0) [ 1163.557954] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1163.624977] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1163.652196] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1163.656124] attempt to access beyond end of device [ 1163.685239] loop2: rw=2049, want=6434, limit=52 [ 1163.709307] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1163.820166] minix_free_inode: bit 1 already cleared 02:35:58 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x1c) 02:35:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000feff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:58 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:35:58 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003854000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:58 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = getpid() ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3, 0x0, 0x81, 0x40, 0x0, 0x2, 0x10050, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x40800, 0x1, 0x1, 0x9, 0x7fc, 0x0, 0x800}, r0, 0x1, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x8) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000680)={0x0, 0x9, 0xe5, "08e0d1362f93f506e63839fae8c0c04c267ea9257d65e1a7b86de7579117729a5f9b94206744b12d841eac8e0539732fc30ec543694f8369e9d96365f9755ee4c7b3fa4382f9fe965ba73c1c505861e459bc96d52700074529b21a1033bf6d6ce8c7490efd9d29f4c55e9993d9d6eac05fc104e912498c029bd49b50a6171616175fa51074ed240f963db67d1063b89da5e52963a978546ca0d65cf629643a48e0e9ceba613dbe0f0872c8f822ac583e692a97db9e6e26c9354ae03b9cfe629659f425fe07a8c5b52c9fdc69d466321ed4f0d658f530a91dc4f2c15406b934248753ed171b"}, 0xed) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)="4a4db87aa403d9dccf299d2b533368894877bd82e944b4e6cc62d8ab0fee424449ba3333850589a738d7d70672ccbb3b148f6e52f904b764be6733d191a0d38b2090fc4779592d4e", 0x48}, {&(0x7f0000000280)="b018c6cc2cf0ce889646236aafb07bee3c9a288bf480212a773997596811c373d2f7f189175b9edef3672f590a6ae94e45f10a29df01ab2182551052cb8836bea522347d502ba87ef3dd1772b04f02b47af59482e92a5cdfe7735c966a553b852506bd4765699efa5c9eac3dafe1bd989b463149676431294a57b0d5f85585774817a33414c4c21f7acad11350e12bf66d273f99be346e3fc7e6bf76ea3c64947f4684e26cea70fb531bdbbb3a72baeb19cae08e8a3047a77fec1411e257d59a8e47cf623bdf915ee8e5d0dedb74f8e67a706106eef39330377e41460cd700f4f2d136d685fd9738649d23af0ba0193d1605e541a2b95d2f", 0xf8}, {&(0x7f00000003c0)="c64521f576942a49301c3f376783d688afd23a38ee3355717050d0120972407bb8728b1118dc1d3e06ed5d252e57154dd73bae10fc83f14af6506656e832343eec3c13bf1ed6bb88da70f69556ad1ffe7d02bc9e77a3ed35701a567be29d4df8755dfc64dfaa21920244d9c1972bbc7b1de082d45b050f3dce1279c581188abf2f357d4fad93f0369cfd898d7bc97e9ec0f1796c8b3ef662ba273e469b3752f65b0bcd847e8dbfd9b533c02babb443afa3083eeb2a8ace81cdd3ce26528f34feeda704ed5f0396b6e63ad333e8a1584c1de64d40a1521b63630dbd33bbe1fbb84f27656bbe2506", 0xe7}, {&(0x7f0000000040)="b444c08e2a8385f0639fa52306f81fa8dd8ab5da", 0x14}, {&(0x7f0000000140)="8059169791c97999168c70e8a3cfac1f8291e964751ffd927a6af7b20b87af657efbd7634166befbb8c78d", 0x2b}, {&(0x7f00000004c0)="f46184d563bd28cb60824fa79158b45d9ff50f1386176e4fac860ae0d5a9e136eca2aba34690b0768e13fa01f3dccf064c4dd2ccb54e8f69b96160e9df1128c1b8a826d9eba079d3ac8782650439d0c315e42ea4f6a653f7985529b158b9e947e4ca9a1fcb959e9d1a169da9ab0fd0d9d16949273811ad7373b2e6d0bc3a794ec5a6aa0d82ff732242c3df8fa0121e11d919f843c411314716e63771c882f03b72adce659d89a634df1d4a6bfd7e40522e45726cc488", 0xb6}, {&(0x7f0000000580)="7827cfddae86b20f0830525bd9e565a0dc7782f30ca74ea06dc154f81feca8e9640919d8ddd1b661829d3b453061715703ca5e34efd4b8e08f76582b77ac448239710bc9e097db658bd977e252d4a36d", 0x50}], 0x7, 0xffff) 02:35:58 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1163.885725] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000400300000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1163.996426] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1164.026460] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1164.086261] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1164.116811] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1164.128225] attempt to access beyond end of device [ 1164.146988] loop2: rw=2049, want=6434, limit=52 02:35:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1164.175509] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1164.190327] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1164.195864] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:58 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}, {&(0x7f00000001c0)="35ef08d4b543a05a11794d27d86b286e058576655a8fbf2d57134c75677f2c4df00fd2915fb6430ff5f43d63c8b5aa8f7108ed4ddb04bdc7a0797df19eaf747a6313c1e2d17c9d43724bf4cdd9ed55faefca8ea338261a1e9044d2472703148b8afabfb8607b99734892718720322c13df5854e2fef4f729ad79a3590d5ee778bf7f3b41100719df34fc7b4f62450e4e2474b051b2983e0a9d1910fa", 0x9c}, {&(0x7f00000000c0)="2fc64de0d848a453db09a1cc1be73f194af9a3e8d08f5954e1fa8ba1b6978ec564748fe8eb454fb834446bc2e195543d0a4b645e772489d50db93e2ddbbef7", 0x3f, 0x1ff}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000340)) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x1) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1164.258890] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:35:58 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804010019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1164.324589] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1164.334850] minix_free_inode: bit 1 already cleared [ 1164.362980] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1164.374688] EXT4-fs (loop1): mount failed 02:35:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000034000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1164.527310] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1164.542010] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1164.587088] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:58 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1164.661239] attempt to access beyond end of device [ 1164.691330] loop2: rw=2049, want=6434, limit=52 [ 1164.708143] audit: type=1800 audit(1590028558.959:273): pid=8620 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="memory.stat" dev="sda1" ino=15970 res=0 [ 1164.739608] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:35:59 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x1c) 02:35:59 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003800240019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:35:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000fffff000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:59 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = getpid() ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3, 0x0, 0x81, 0x40, 0x0, 0x2, 0x10050, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x40800, 0x1, 0x1, 0x9, 0x7fc, 0x0, 0x800}, r0, 0x1, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x8) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000680)={0x0, 0x9, 0xe5, "08e0d1362f93f506e63839fae8c0c04c267ea9257d65e1a7b86de7579117729a5f9b94206744b12d841eac8e0539732fc30ec543694f8369e9d96365f9755ee4c7b3fa4382f9fe965ba73c1c505861e459bc96d52700074529b21a1033bf6d6ce8c7490efd9d29f4c55e9993d9d6eac05fc104e912498c029bd49b50a6171616175fa51074ed240f963db67d1063b89da5e52963a978546ca0d65cf629643a48e0e9ceba613dbe0f0872c8f822ac583e692a97db9e6e26c9354ae03b9cfe629659f425fe07a8c5b52c9fdc69d466321ed4f0d658f530a91dc4f2c15406b934248753ed171b"}, 0xed) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)="4a4db87aa403d9dccf299d2b533368894877bd82e944b4e6cc62d8ab0fee424449ba3333850589a738d7d70672ccbb3b148f6e52f904b764be6733d191a0d38b2090fc4779592d4e", 0x48}, {&(0x7f0000000280)="b018c6cc2cf0ce889646236aafb07bee3c9a288bf480212a773997596811c373d2f7f189175b9edef3672f590a6ae94e45f10a29df01ab2182551052cb8836bea522347d502ba87ef3dd1772b04f02b47af59482e92a5cdfe7735c966a553b852506bd4765699efa5c9eac3dafe1bd989b463149676431294a57b0d5f85585774817a33414c4c21f7acad11350e12bf66d273f99be346e3fc7e6bf76ea3c64947f4684e26cea70fb531bdbbb3a72baeb19cae08e8a3047a77fec1411e257d59a8e47cf623bdf915ee8e5d0dedb74f8e67a706106eef39330377e41460cd700f4f2d136d685fd9738649d23af0ba0193d1605e541a2b95d2f", 0xf8}, {&(0x7f00000003c0)="c64521f576942a49301c3f376783d688afd23a38ee3355717050d0120972407bb8728b1118dc1d3e06ed5d252e57154dd73bae10fc83f14af6506656e832343eec3c13bf1ed6bb88da70f69556ad1ffe7d02bc9e77a3ed35701a567be29d4df8755dfc64dfaa21920244d9c1972bbc7b1de082d45b050f3dce1279c581188abf2f357d4fad93f0369cfd898d7bc97e9ec0f1796c8b3ef662ba273e469b3752f65b0bcd847e8dbfd9b533c02babb443afa3083eeb2a8ace81cdd3ce26528f34feeda704ed5f0396b6e63ad333e8a1584c1de64d40a1521b63630dbd33bbe1fbb84f27656bbe2506", 0xe7}, {&(0x7f0000000040)="b444c08e2a8385f0639fa52306f81fa8dd8ab5da", 0x14}, {&(0x7f0000000140)="8059169791c97999168c70e8a3cfac1f8291e964751ffd927a6af7b20b87af657efbd7634166befbb8c78d", 0x2b}, {&(0x7f00000004c0)="f46184d563bd28cb60824fa79158b45d9ff50f1386176e4fac860ae0d5a9e136eca2aba34690b0768e13fa01f3dccf064c4dd2ccb54e8f69b96160e9df1128c1b8a826d9eba079d3ac8782650439d0c315e42ea4f6a653f7985529b158b9e947e4ca9a1fcb959e9d1a169da9ab0fd0d9d16949273811ad7373b2e6d0bc3a794ec5a6aa0d82ff732242c3df8fa0121e11d919f843c411314716e63771c882f03b72adce659d89a634df1d4a6bfd7e40522e45726cc488", 0xb6}, {&(0x7f0000000580)="7827cfddae86b20f0830525bd9e565a0dc7782f30ca74ea06dc154f81feca8e9640919d8ddd1b661829d3b453061715703ca5e34efd4b8e08f76582b77ac448239710bc9e097db658bd977e252d4a36d", 0x50}], 0x7, 0xffff) 02:35:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="0c0100004000008127bd70e4fddbdf250d0000004a05e58f361f40c0a6e7b2b5708e492eb7300131478fa13534a1940a4806ec9264442921bee1004288033b7bff21e7077f91c095af5e17235379f4de6a3612bf8edbdc30a585e609712c3dd0ebc338a810a953f090c6fd90bd848115557c8c2c226e3554e18c8e549292ca95a49265222457bbb633363e0686f8d0ae6b0802e58700a0ee4a2f3b61465a9bbc023bb7930988e6cec8455520bfe46d92b7394e36d2054777ef2f91c51ac9e07c087db3685ef012e19bebb2c7b44627da4c5a93eb95222e279733d4289ed32c3c455333f9d8b17e3d703ccc80239764363a83a13db1ad22aedb5fe202b3ce84944f89d3ac8e9af8b900a3eac5cf76cbb266a001767f65f30f225c4a7e89b4fea6e350f70279977bf85f2a272f6d48ae96d6eb90c7ea9d073b802289e27e740c38165a172b68fac4ef439771"], 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f00000000c0)) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) setsockopt$inet_dccp_buf(r2, 0x21, 0x80, &(0x7f0000000580)="adcd1ae6918bca53ce904fe011eb71a71af07f90ef4e96e0cd05c098d5c3e6a4ce227d8f27f0956bf29116842ddf2722b4ecd0da457b631b13e1ac96c78598249d8555784db3a54d123ca2129ea1", 0x4e) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000600)=@assoc_value, &(0x7f0000000240)=0x8) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x2}}, 0x2750, 0x800, 0xd1, 0x7, 0x101}, &(0x7f0000000340)=0x98) fcntl$setpipe(r0, 0x407, 0x7fffffff) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1164.840038] minix_free_inode: bit 1 already cleared [ 1164.850373] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1164.867222] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1164.880976] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1164.890333] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1164.923260] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:35:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1164.948952] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1164.961132] EXT4-fs (loop1): mount failed [ 1165.078531] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1165.097851] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1165.136149] attempt to access beyond end of device [ 1165.145226] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:59 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003800270019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1165.189718] loop2: rw=2049, want=6434, limit=52 02:35:59 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4020000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1165.218422] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:35:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1165.392447] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1165.400583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:35:59 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000240)={0x200, "22c9ed28605f520d044115afbd7f4e49465b8c1a82202c6e25e8e61d66f28c4e", 0x4, 0x2, 0x6, 0x7ca, 0x1, 0x1, 0x10001, 0x8}) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000001c0)={0x3ff, "f270eab560c18c1fe67798f98d82a23017d829ff7770c89a9729ad2c9026eb22", 0x100, 0x2, 0x0, 0x4, 0x1}) 02:35:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000003000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff135}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) getresgid(0x0, &(0x7f00000003c0), 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0xde050300, r3, 0x0, 0x2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x444, 0x3f4, 0x20, 0x70bd25, 0x25dfdbfd, {0x14, 0x0, 0x40, [0xe00000, 0x6, 0x593, 0x75, 0x3, 0x8, 0x7fffffff, 0x400, 0x0, 0x400, 0x7f, 0x4, 0xffff, 0x80000000, 0x9, 0x4c4, 0xffffffff, 0x6, 0x9, 0x400, 0x9, 0x80000000, 0x1, 0xf7b2, 0x40, 0xf3, 0x5, 0x6, 0xd098, 0x1, 0x0, 0x9, 0x5, 0x1, 0x78e, 0x1000, 0xcfb9, 0x7fffffff, 0x0, 0x1ff, 0x5, 0x8001, 0x9cf5, 0xffffffff, 0x1, 0x5, 0x6, 0x4, 0x5, 0x8, 0x0, 0x8, 0x97, 0xffff, 0x2, 0x17f6, 0x9, 0x9, 0x1f, 0x2, 0x7, 0x81a, 0x5, 0x6], [0xffff2aaf, 0x5, 0x635, 0x1, 0x5, 0x5, 0x3, 0x4, 0xd955, 0x3f, 0x7fffffff, 0xff, 0x8, 0x3ff, 0x81, 0x200, 0x1f, 0x200, 0x664b, 0xf397, 0x2, 0x1d7, 0x7ff, 0x1, 0x5, 0x0, 0x64, 0x401, 0x1, 0x8000, 0x0, 0x8, 0x0, 0x3, 0x1, 0x2, 0x3ff, 0x1, 0xa3, 0x1, 0x4, 0x3, 0x0, 0x2, 0x3ff, 0xffff0450, 0x800, 0x3, 0x0, 0x2, 0xfff, 0xffffffff, 0x8, 0xffffffff, 0x4, 0x80000001, 0x8, 0x9, 0x8, 0x5, 0x9, 0x80000001, 0x400, 0x6], [0x0, 0xfffffffa, 0x2, 0x7f, 0x1, 0x8, 0x8, 0x6d7, 0x1, 0x0, 0x1727, 0x1, 0x2608, 0x1, 0xfff, 0xb4f, 0x100, 0x200, 0x2, 0xdb, 0x8de, 0x5, 0x7ff, 0xfffffffc, 0x101, 0x6, 0x1, 0x7fffffff, 0x0, 0x2, 0x7, 0x6, 0xd1, 0x200, 0xb7e, 0x1, 0x5, 0x1, 0x7fff, 0x3e, 0x7, 0x91a, 0xc0000000, 0x81, 0xfffffffa, 0x20, 0x6, 0x8, 0x0, 0x4, 0x1, 0x5, 0x4, 0x5, 0x5, 0x5, 0x3f, 0x7fff, 0x7bb9, 0x2, 0x8000, 0xfffffff7, 0x401, 0x3], [0xffffff81, 0x0, 0x6, 0x8, 0x2, 0x80000001, 0x7ff, 0x7ff, 0x6, 0x8528, 0x9, 0x8b4, 0x5, 0xfff, 0x6, 0x1a, 0x2, 0x800, 0x3cc, 0xfff, 0x1, 0x5, 0xf7, 0x3183, 0x2, 0x401, 0x5bf5, 0x7f, 0x1000, 0x9, 0x0, 0x20, 0x81, 0x9, 0xb2b, 0x1c, 0xe6, 0x17, 0x6, 0x8, 0x8000, 0x6, 0x3f, 0x7ff, 0x226f, 0xb1, 0x10000, 0xfffffffe, 0xffffffff, 0x0, 0xfc, 0xfffffff9, 0x7ff, 0x8, 0xfffffffd, 0x7f, 0x70c, 0xffffffff, 0x9, 0x800, 0x8, 0x3, 0x3, 0x4], 0x24, ['ppp0wlan0\x00', 'vmnet1!\x00', '\x00', '\x00', '^\x00', '\x00', '.%{mime_type\x00']}, ["", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x8041}, 0x1) [ 1165.500039] minix_free_inode: bit 1 already cleared [ 1165.510351] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1165.521874] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1165.532785] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1165.559145] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1165.593000] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1165.600041] EXT4-fs (loop1): mount failed 02:35:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:35:59 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x1c) 02:35:59 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003800280019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:00 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x7ffffffffffff, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1165.848844] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1165.910705] audit: type=1800 audit(1590028560.169:274): pid=8747 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="memory.stat" dev="sda1" ino=16262 res=0 [ 1165.939141] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x8800) getsockopt$inet_dccp_buf(r2, 0x21, 0x80, &(0x7f00000002c0)=""/4096, &(0x7f00000001c0)=0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x1f, @loopback, 0x5}, {0xa, 0x4e22, 0x4, @mcast1, 0x6}, 0x7, [0xfffffe00, 0x400, 0x20, 0x8, 0xfffffff8, 0xe2, 0x0, 0x1]}, 0x5c) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x2, 0xb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r7, 0x0, 0x0, 0x110001) lseek(r7, 0x0, 0x3) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 1165.966657] attempt to access beyond end of device [ 1165.980469] loop2: rw=2049, want=6434, limit=52 [ 1165.985298] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1166.041806] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1166.055920] audit: type=1800 audit(1590028560.309:275): pid=8771 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=15942 res=0 02:36:00 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003800290019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1166.161865] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1166.179767] minix_free_inode: bit 1 already cleared 02:36:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000a000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1166.218267] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1166.235428] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1166.252302] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1166.261669] EXT4-fs (loop1): mount failed [ 1166.290879] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000c000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x8800) getsockopt$inet_dccp_buf(r2, 0x21, 0x80, &(0x7f00000002c0)=""/4096, &(0x7f00000001c0)=0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x1f, @loopback, 0x5}, {0xa, 0x4e22, 0x4, @mcast1, 0x6}, 0x7, [0xfffffe00, 0x400, 0x20, 0x8, 0xfffffff8, 0xe2, 0x0, 0x1]}, 0x5c) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x2, 0xb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r7, 0x0, 0x0, 0x110001) lseek(r7, 0x0, 0x3) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 1166.390040] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1166.398247] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1166.427362] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:00 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003800400019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1166.472576] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1166.510689] EXT4-fs: failed to create workqueue [ 1166.531989] EXT4-fs (loop1): mount failed 02:36:00 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x1c) 02:36:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:00 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6b6b6b00000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1166.646204] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:00 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) r3 = socket(0x10, 0x2, 0xfffffffe) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x2000}, 0xc) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24048010}, 0x1000d) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000840) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:logrotate_exec_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) lseek(r1, 0x0, 0x3) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f00000000c0)={0xe83, "4d88daa313e7069e26e232f7e27499e2f58efb743fc6090ecd55f241ef02b196", 0x0, 0x1}) 02:36:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000f000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:01 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$llc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6, 0x40000) tee(r0, r2, 0x9, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0xd9}, 0x16, 0x3) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x110001) lseek(r5, 0x0, 0x3) setsockopt$ax25_int(r5, 0x101, 0x7, &(0x7f0000000140)=0x99e, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000003000/0x4000)=nil) [ 1166.821489] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1166.844754] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1166.865864] attempt to access beyond end of device [ 1166.892404] loop2: rw=2049, want=6434, limit=52 [ 1166.923993] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:01 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003801400019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1167.009977] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1167.042212] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:01 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x400300, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x92) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) signalfd4(r0, &(0x7f0000000440)={[0x100000001]}, 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="0800000000000000070000000000000006000000ff000000090000000000000000010000000000000700000000000000050000000000000000000000000000000000000000000000020400000000000000000000000000000800000000000000400000000000000001040000000000000000e118ebf40000000000000000000000000000082000000000000000000000000000004000000000000000040000000000000001000000000000000000000000000000000000000000000000010000000000000000000000000000ff030000000000002f0f00000000000001000000000000000000000000000000000000000000000008000000000000000000000000000000070000000000000000000000000000000600f9ffffffffffffff0000000000000000000000000000811000000000000000000000000000001819000000000000000000000000000006000000000000000000000000000000000000000000000000100000000000000000000000000000feffffffffffffff35060023000000000600000000000000000000dee6335500000000000000000000020000000000000000000000000000200000000000000001000000000000004365124200000000110000000000000000270000000004000000000000000000000000000005000000000000000700000000000000090000000000000000000000000000000000000000000000880800"/533]) 02:36:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1167.146559] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1167.154679] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1167.190324] minix_free_inode: bit 1 already cleared [ 1167.209662] EXT4-fs (loop1): corrupt root inode, run e2fsck 02:36:01 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c5"], 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) write$P9_RWALK(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="a300000891fad4276319b2f103eaa48c7f041000000000a69fdad60901090000000000e29571003275a442ad3e4d1b188f7bdc7071f4bfda8fa6cf051292bbb6c90c06cc2d95eb099cd0064b45ac6d02f4a49b97d73913972459b4cace83410aaafa5a37e0271e5c0bc05f7b0c070b85da70bf6e5beed44e03a6a48942f721d954b032c9ac262be415ee26a31e1efeff2bbbd4a191f572598c970d8e5ef3aef10d1c00000000cc37"], 0x23) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1167.244037] EXT4-fs (loop1): mount failed [ 1167.254202] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000003f000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1167.392196] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1167.429996] attempt to access beyond end of device [ 1167.457250] loop2: rw=2049, want=6434, limit=52 [ 1167.483325] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1167.679833] minix_free_inode: bit 1 already cleared 02:36:01 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}, 0x1c) 02:36:01 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003802400019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000040000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:02 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x100000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x5, 0x40000) write$midi(r2, &(0x7f0000000040)="dc9dbcfa0044aaac3bc64d73c0fd62bbd841b3ddf91ce4c5214cac77efec1c05757e15b41555bef9df08e546c3d8026cb34bdaa59cc2069adccc", 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:36:02 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) 02:36:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000048000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1167.831694] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:02 executing program 4: lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000000100)={'L-'}, 0x16, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x5f, 0x2}, 0x0, 0x4000000000001, 0xffffffff, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x8000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r0, 0x0, 0x0, 0x8020001) open_by_handle_at(0xffffffffffffffff, 0x0, 0x400) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=""/128, &(0x7f0000000000)=0x80) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x200004) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) fdatasync(r1) inotify_init() ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0xe, 0x7fffffff, 0xffffffffffffffff, 0x5}) 02:36:02 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003803400019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1167.945679] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000004c000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1168.009712] attempt to access beyond end of device [ 1168.014847] loop2: rw=2049, want=6434, limit=52 [ 1168.036116] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1168.078472] audit: type=1800 audit(1590028562.320:276): pid=8941 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=15781 res=0 02:36:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000060000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:02 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) msgget$private(0x0, 0x231) [ 1168.121933] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1168.134776] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1168.179863] minix_free_inode: bit 1 already cleared [ 1168.183695] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1168.220671] nla_parse: 15 callbacks suppressed [ 1168.220680] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1168.231476] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1168.304915] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1168.328712] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1168.337488] EXT4-fs (loop1): mount failed [ 1168.415147] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1168.471524] attempt to access beyond end of device [ 1168.476498] loop2: rw=2049, want=6434, limit=52 [ 1168.513644] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1168.527832] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1168.549667] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1168.593466] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1168.609628] minix_free_inode: bit 1 already cleared 02:36:02 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x1c) 02:36:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000030000000000000000a50000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffd3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x439}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80006, 0xb5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4020000}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x110001) lseek(r5, 0x0, 0x3) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f00000000c0)={0x2b, @local, 0x4e20, 0x0, 'nq\x00', 0x22, 0x800, 0x4c}, 0x2c) 02:36:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000005865000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1168.647073] EXT4-fs: failed to create workqueue [ 1168.656551] EXT4-fs (loop1): mount failed 02:36:03 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003800540019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:03 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:03 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x81, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200), 0x2000) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x5}}, 0x18) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1168.707258] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000068000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1168.861899] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1168.900919] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:03 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003802800019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:03 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x6c) [ 1168.955519] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000006c000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1169.020370] minix_free_inode: bit 1 already cleared 02:36:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x0, 0x14, 0x1d}) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d", 0x700) fallocate(r1, 0x11, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) lseek(0xffffffffffffffff, 0x0, 0x3) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000480)={0x22, 0x0, 0x0, 0x40}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b93c68fe407901bfa51de9d2d8b67d48826d420bf1805b8b6afce4799c8ca86169a5ae07f7cf7e1a971883cffff7b21378940aeceb6c75997fefd541460fc61708cbe6710277f25b6dfc4971f097cdfe4e590350afa5d527240829224ad126c467feddd88bf637326cf972765f972bdc7e36b2f07bce69ccb1e266c618d83eb442ee4c970820c87c0b36914ff730d0c2f36db5672f1254185dc7062201f8cd743d1edcdeda65ab", @ANYRES16, @ANYBLOB="000029bd7000fcdbdf250900000030000380080001000200000014000600fe8000000000000000000000000000aa080003000000000008000100000000000c0001800800090019000000240001800600020001000000080005000200000008000b0073697000080005000000000004000180340003801400020069705f7674693000000000000000000005000800000000001400060020010000000000000000000000000002080005"], 0xb4}}, 0x40) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x6, &(0x7f0000000840)=[{&(0x7f0000000540)="cfbf9eb07e3a249802723ba4687db80d82e4d06082406cdf7abe1cae57cdccd4559f1ac839ce69f96adb5c0edc43725c9a2c9ff74b9cb1ea306da38cee7836bc33ffb3ba05f8530bab82833cb44d102c5f32a21bde5552833d5f7008ab8531f1c48a8ea24cc230843e273aff7302c219a0a8e107718144db485a33b9e23ca0101471f81138a0dfca4a799bf8ff1b15a375d562bef5af4348045d", 0x9a, 0xc099}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x3}, {0x0}, {0x0}, {0x0, 0x0, 0x4}], 0x4000, &(0x7f0000000900)={[{@block={'block', 0x3d, 0x800}}, {@check_relaxed='check=relaxed'}, {@norock='norock'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/card#\x00'}}]}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000004c0)={0x8000000, 0x6, 0xd}) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0xfffffffffffffed9, 0x0, 0x1, 0xfffffffffffff801}) sendto$inet(r2, 0x0, 0x0, 0x24004fe9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 1169.110487] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1169.128814] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1169.141427] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1169.156467] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1169.168726] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:03 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003803800019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1169.225450] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1169.237717] EXT4-fs (loop1): mount failed [ 1169.276668] audit: type=1800 audit(1590028563.530:277): pid=9032 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16320 res=0 [ 1169.405059] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1169.427201] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1169.435692] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1169.475924] attempt to access beyond end of device 02:36:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000074000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 02:36:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x0, 0x14, 0x1d}) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000000600)="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", 0x700) fallocate(r1, 0x11, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) lseek(0xffffffffffffffff, 0x0, 0x3) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000480)={0x22, 0x0, 0x0, 0x40}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b93c68fe407901bfa51de9d2d8b67d48826d420bf1805b8b6afce4799c8ca86169a5ae07f7cf7e1a971883cffff7b21378940aeceb6c75997fefd541460fc61708cbe6710277f25b6dfc4971f097cdfe4e590350afa5d527240829224ad126c467feddd88bf637326cf972765f972bdc7e36b2f07bce69ccb1e266c618d83eb442ee4c970820c87c0b36914ff730d0c2f36db5672f1254185dc7062201f8cd743d1edcdeda65ab", @ANYRES16, @ANYBLOB="000029bd7000fcdbdf250900000030000380080001000200000014000600fe8000000000000000000000000000aa080003000000000008000100000000000c0001800800090019000000240001800600020001000000080005000200000008000b0073697000080005000000000004000180340003801400020069705f7674693000000000000000000005000800000000001400060020010000000000000000000000000002080005"], 0xb4}}, 0x40) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x6, &(0x7f0000000840)=[{&(0x7f0000000540)="cfbf9eb07e3a249802723ba4687db80d82e4d06082406cdf7abe1cae57cdccd4559f1ac839ce69f96adb5c0edc43725c9a2c9ff74b9cb1ea306da38cee7836bc33ffb3ba05f8530bab82833cb44d102c5f32a21bde5552833d5f7008ab8531f1c48a8ea24cc230843e273aff7302c219a0a8e107718144db485a33b9e23ca0101471f81138a0dfca4a799bf8ff1b15a375d562bef5af4348045d", 0x9a, 0xc099}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x3}, {0x0}, {0x0}, {0x0, 0x0, 0x4}], 0x4000, &(0x7f0000000900)={[{@block={'block', 0x3d, 0x800}}, {@check_relaxed='check=relaxed'}, {@norock='norock'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/card#\x00'}}]}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000004c0)={0x8000000, 0x6, 0xd}) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0xfffffffffffffed9, 0x0, 0x1, 0xfffffffffffff801}) sendto$inet(r2, 0x0, 0x0, 0x24004fe9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 02:36:03 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000000038d8ac0019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1169.509193] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1169.523688] loop2: rw=2049, want=6434, limit=52 [ 1169.542171] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1169.583337] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1169.610006] EXT4-fs: failed to create workqueue [ 1169.618772] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1169.632482] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1169.644235] EXT4-fs (loop1): mount failed [ 1169.719697] minix_free_inode: bit 1 already cleared 02:36:04 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x300000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:04 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x3fc}, {&(0x7f0000000780)="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", 0x309, 0x34fa}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x22000) recvmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@tipc=@id, 0x80, &(0x7f00000000c0)}, 0x20012000) 02:36:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) 02:36:04 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003800c00019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000007a000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1169.764183] audit: type=1800 audit(1590028564.020:278): pid=9067 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16326 res=0 02:36:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) 02:36:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000081000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1169.874154] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sync() [ 1169.980556] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1169.989162] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 1170.025582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000ffffa888000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:04 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003801c00019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) 02:36:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000ffffff9e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1170.172981] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1170.267112] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1170.303967] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1170.318645] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1170.363979] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1170.379615] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1170.408256] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1170.425095] EXT4-fs (loop1): mount failed [ 1170.516564] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1170.526253] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1170.537508] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1170.558029] EXT4-fs: failed to create workqueue 02:36:04 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x400000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0x2, 0x3f}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xfff, 0x20, 0x3f, 0xfffffffffffffffb}, &(0x7f00000001c0)=0x18) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {r2, @in6={{0xa, 0x4e23, 0x88000001, @private1={0xfc, 0x1, [], 0x1}, 0x200}}, 0x0, 0x0, 0x0, 0x2, 0x4}}, &(0x7f0000000040)=0xb0) 02:36:04 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003802c00019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c) 02:36:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000006d9000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1170.564994] EXT4-fs (loop1): mount failed 02:36:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000fffffff0000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1170.635558] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) 02:36:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000fffe000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1170.724674] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c) 02:36:05 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x402, 0x0) accept$netrom(r0, 0x0, &(0x7f0000000340)) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = socket(0x10, 0x80002, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x2000}, 0xc) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24048010}, 0x1000d) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000840) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00002cbd7000fedbdf250100000008000400ac1e000114000300fe8000000000000000000000000000aa"], 0x30}}, 0x40048043) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000fff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:05 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003803c00019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1170.882310] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1170.907542] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1170.955126] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1170.968098] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1170.993538] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1170.999649] EXT4-fs (loop1): mount failed [ 1171.050438] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1171.121285] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1171.145533] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1171.148353] attempt to access beyond end of device [ 1171.187968] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1171.202107] loop2: rw=2049, want=6434, limit=52 [ 1171.206807] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1171.215248] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1171.258978] EXT4-fs: failed to create workqueue [ 1171.263716] EXT4-fs (loop1): mount failed 02:36:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000088a8ffff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1171.299468] minix_free_inode: bit 1 already cleared 02:36:05 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0xd) 02:36:05 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x500000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:05 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='iso9660\x00', 0x10028, &(0x7f0000000300)='minix\x00') creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$instantiate(0xc, r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c04000000656372797074667320747275737465643a6d696e697800203045303030303030303030303030303231333334203200"], 0x34, 0xffffffffffffffff) 02:36:05 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003801e70019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) 02:36:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000f0ffff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00007fffffff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c) [ 1171.593913] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1171.642170] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1171.688141] attempt to access beyond end of device [ 1171.707177] loop2: rw=2049, want=6434, limit=52 [ 1171.714058] encrypted_key: insufficient parameters specified 02:36:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00009effffff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xa}, 0x1c) [ 1171.737786] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1171.791122] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1171.801027] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1171.809060] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1171.815382] encrypted_key: insufficient parameters specified [ 1171.819483] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1171.835737] EXT4-fs (loop1): corrupt root inode, run e2fsck 02:36:06 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003801e80019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1171.879675] EXT4-fs (loop1): mount failed 02:36:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000f0ffffff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1171.960160] minix_free_inode: bit 1 already cleared [ 1172.017256] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1172.102050] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xe}, 0x1c) 02:36:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x12, 0xd6, 0x8, 0xa, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x4b}, @sadb_x_sa2={0x2, 0x13, 0x3f, 0x0, 0x0, 0x70bd28}, @sadb_lifetime={0x4, 0x4, 0x3, 0x803d, 0x0, 0xd8bd}, @sadb_x_nat_t_port={0x1, 0x3a47a220ef282712, 0x4e23}]}, 0x50}}, 0x4) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0xffffffffffffffa6, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:06 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x600000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:06 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003801e90019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) recvfrom$rxrpc(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x100, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @local, 0x7}}, 0x24) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10080000, 0x1, 0x0, 0x4}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380100001a00010800000000000000007487f654b36e414647e04d6a85aceeb0e3daef21b274a924bab3619673863f5d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c0000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) [ 1172.455282] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000340000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x54}, 0x1c) 02:36:06 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003803fc0019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000fffffffffffff0000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1172.642394] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1172.657261] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1172.702251] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:07 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xfc}, 0x1c) [ 1172.766794] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1172.775525] EXT4-fs (loop1): mount failed [ 1172.806712] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1172.952941] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:07 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x10, &(0x7f0000000240)='minix\x00') creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:07 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x700000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:07 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x1f4}, 0x1c) 02:36:07 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80000000380fff0019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3245fa91d212a84f2b9934a3f1012f7a7988889ecd2e452b750724ccdcb10937918eb2b367e292644046f1c87769a2eb6c4d4fd68feec7ad7cae74251e69761174a241425b18eba25de1b546165d6f4ba3523eb19049eab29e43975e6406305f4191"]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000200)={0x0, 0x9, 0x4, r0, 0x0, &(0x7f00000001c0)={0x98090f, 0x0, [], @string=&(0x7f0000000180)}}) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000240)=0xffff, 0x4) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000280)={'geneve0\x00', 0xf2f}) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000100)=0x126, 0x4) 02:36:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:07 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x218}, 0x1c) [ 1173.295239] nla_parse: 13 callbacks suppressed [ 1173.295249] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1173.355103] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1173.364985] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1173.402826] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1173.443745] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1173.453438] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1173.454114] attempt to access beyond end of device [ 1173.483028] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:07 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x240}, 0x1c) [ 1173.488065] loop2: rw=2049, want=6434, limit=52 02:36:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:07 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804020019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1173.540774] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1173.549149] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1173.578015] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1173.638245] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1173.647479] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1173.655279] EXT4-fs (loop1): mount failed 02:36:07 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x300}, 0x1c) 02:36:07 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @ax25={0x3, @default, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x2000000}, @isdn={0x22, 0x7, 0x6, 0x89, 0x64}, 0x3f, 0x0, 0x0, 0x0, 0x81, &(0x7f00000001c0)='veth0_to_bond\x00', 0x800, 0x9, 0x1c}) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') [ 1173.769917] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1173.805942] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1173.818740] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1173.828180] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1173.836899] minix_free_inode: bit 1 already cleared [ 1173.848108] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1173.859677] EXT4-fs: failed to create workqueue [ 1173.864682] EXT4-fs (loop1): mount failed 02:36:08 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x900000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:08 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r7, 0x0, 0x0, 0x110001) lseek(r7, 0x0, 0x3) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r8, 0x0, 0x0, 0x110001) lseek(r8, 0x0, 0x3) write$tun(r8, &(0x7f0000000180)={@void, @void, @eth={@remote, @broadcast, @val={@void}, {@x25={0x805, {0x0, 0x9, 0x23, "508ac33aa09342d898d3f02bd1c5174520c33bee5291a4106e4f8bc9cb3b4ad9d2667ec2982253fe13dbee64"}}}}}, 0x41) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000200)={{0x4}, 0x8, 0x8, 0x9}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:36:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x3e8}, 0x1c) [ 1173.988391] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:08 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804030019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1174.036539] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x500}, 0x1c) [ 1174.118025] attempt to access beyond end of device [ 1174.136803] loop2: rw=2049, want=6434, limit=52 [ 1174.161998] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1174.183254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000000000a0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1174.211152] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1174.231640] audit: type=1800 audit(1590028568.480:279): pid=9415 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=15783 res=0 02:36:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x600}, 0x1c) 02:36:08 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="899ea5ac0213", 0x6, 0x400}, {&(0x7f00000001c0)="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", 0x3d5, 0x34f9}], 0x1004080, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:08 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804040019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1174.341183] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1174.366901] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1174.376645] minix_free_inode: bit 1 already cleared 02:36:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000000000c0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1174.403825] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1174.441235] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1174.468765] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1174.474538] EXT4-fs (loop1): mount failed [ 1174.485552] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1174.497996] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1174.595232] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1174.595502] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 1174.730759] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1174.740175] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1174.747675] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 1174.778335] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1174.802669] EXT4-fs: failed to create workqueue [ 1174.807551] EXT4-fs (loop1): mount failed 02:36:09 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1004000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000000000e0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1174.993716] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1175.058923] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1175.103044] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1175.129765] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1175.135540] EXT4-fs (loop1): mount failed [ 1175.242321] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:09 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804050019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:09 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x700}, 0x1c) 02:36:09 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000000000f0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:09 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x900}, 0x1c) 02:36:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) [ 1175.734619] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1175.734928] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1175.772432] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000100000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:10 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804060019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1175.842316] IPVS: ftp: loaded support on port[0] = 21 [ 1175.849126] attempt to access beyond end of device [ 1175.854393] loop2: rw=2049, want=6434, limit=52 [ 1175.863948] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1175.891264] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1175.923241] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1175.949638] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1175.985105] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xa00}, 0x1c) 02:36:10 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f00000001c0)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1176.013047] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1176.049548] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000200000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1176.063803] EXT4-fs (loop1): mount failed [ 1176.080626] minix_free_inode: bit 1 already cleared 02:36:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xe00}, 0x1c) [ 1176.200424] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:10 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804070019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:10 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2200000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xf27}, 0x1c) 02:36:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000000003f0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1176.315605] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1176.332940] IPVS: ftp: loaded support on port[0] = 21 02:36:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x1802}, 0x1c) [ 1176.403596] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1176.424072] attempt to access beyond end of device [ 1176.466206] loop2: rw=2049, want=6434, limit=52 [ 1176.534758] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1176.547164] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1176.627426] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1176.659269] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1176.668321] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1176.679035] minix_free_inode: bit 1 already cleared [ 1176.728476] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1176.734318] EXT4-fs (loop1): mount failed [ 1176.855408] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1176.882038] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1176.892221] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x2000}, 0x1c) 02:36:11 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804090019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000400)={0x9c0000, 0x80000000, 0x40, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0xa10901, 0x10000, [], @p_u32=&(0x7f0000000340)=0xffffffff}}) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000440)=0x2, 0x1) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2480005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe62}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4884) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1176.906876] EXT4-fs: failed to create workqueue [ 1176.912056] EXT4-fs (loop1): mount failed 02:36:11 executing program 4: r0 = socket(0x2, 0x3, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='macvtap0\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmmsg$unix(r0, &(0x7f0000002fc0)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="100000db1a0000000100018001000000"], 0x10}], 0x1, 0x0) 02:36:11 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2300000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000480000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x270f}, 0x1c) 02:36:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000000004c0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1177.039063] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1177.064797] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 02:36:11 executing program 4: syz_open_procfs(0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f87e56f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e1ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba4084e7a3b0c6c699890e19745ba9a37cfdd7ff58b659bbf65d6a2b2"], 0x9d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) close(r1) shmdt(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000000c0)={0x6}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 1177.149606] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1177.150231] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1177.169847] attempt to access beyond end of device [ 1177.177131] loop2: rw=2049, want=6434, limit=52 02:36:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x3f00}, 0x1c) 02:36:11 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804220019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1177.230039] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1177.268626] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:36:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000600000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1177.316263] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1177.383150] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x4000}, 0x1c) [ 1177.460540] minix_free_inode: bit 1 already cleared 02:36:11 executing program 2: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e00200fd00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) accept$packet(r0, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r3, 0x0, 0x30}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x2}, &(0x7f0000000200)=0x8) 02:36:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000058650000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1177.491067] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1177.512728] EXT4-fs (loop1): mount failed [ 1177.527611] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:11 executing program 4: syz_open_procfs(0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f87e56f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e1ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba4084e7a3b0c6c699890e19745ba9a37cfdd7ff58b659bbf65d6a2b2"], 0x9d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) close(r1) shmdt(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000000c0)={0x6}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 1177.715745] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1177.730351] MINIX-fs: bad superblock or unable to read bitmaps 02:36:12 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2c00000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x4002}, 0x1c) 02:36:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000680000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:12 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804230019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:12 executing program 4: syz_open_procfs(0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f87e56f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e1ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba4084e7a3b0c6c699890e19745ba9a37cfdd7ff58b659bbf65d6a2b2"], 0x9d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) close(r1) shmdt(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000000c0)={0x6}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 02:36:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000000006c0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1177.897418] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x5400}, 0x1c) 02:36:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000740000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1178.050420] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:12 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000000038042c0019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1178.152129] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1178.182230] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1178.201210] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1178.246063] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1178.255381] EXT4-fs (loop1): mount failed [ 1178.263956] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1178.416656] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1178.471116] MINIX-fs: bad superblock or unable to read bitmaps 02:36:12 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f00000001c0)="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", 0xfffffffffffffcd1, 0x34f9}, {&(0x7f0000000500)="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", 0x1000, 0x1}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001580)={0x3, 0x9, 0x4, 0x40000000, 0x6, {0x0, 0x2710}, {0x3, 0x8, 0x80, 0x1, 0x5, 0x3f, "7dd7a638"}, 0x7858, 0x1, @offset=0x4, 0x7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000000)={0xd7f9, 0x6}) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000000c0)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000001600)={{0x3b, @local, 0x4e21, 0x3, 'ovf\x00', 0x4, 0x3, 0xd}, {@private=0xa010102, 0x4e22, 0x10000, 0xfff, 0x9, 0x5}}, 0x44) 02:36:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x80fe}, 0x1c) 02:36:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000000007a0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:12 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2d00000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:12 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000000038042d0019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1178.689770] nla_parse: 12 callbacks suppressed [ 1178.689779] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xc0fe}, 0x1c) 02:36:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000810000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1178.775848] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1178.786281] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1178.860947] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1178.877976] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001 [ 1178.885307] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1178.907963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1178.922849] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1178.937225] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1178.957778] EXT4-fs (loop1): mount failed [ 1179.157571] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1179.167600] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1179.182813] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1179.202133] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 1179.204835] EXT4-fs: failed to create workqueue [ 1179.226484] EXT4-fs (loop1): mount failed 02:36:15 executing program 4: syz_open_procfs(0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f87e56f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e1ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba4084e7a3b0c6c699890e19745ba9a37cfdd7ff58b659bbf65d6a2b2"], 0x9d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) close(r1) shmdt(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000000c0)={0x6}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 02:36:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xe803}, 0x1c) 02:36:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000ffffa8880000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:15 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804480019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:15 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3f00000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:15 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = openat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x2a281, 0x3) recvmsg$can_bcm(r1, &(0x7f0000000740)={&(0x7f00000001c0)=@ipx, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/148, 0x94}, {&(0x7f00000003c0)=""/11, 0xb}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000640)=""/115, 0x73}], 0x8}, 0x10040) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1180.957199] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000ffffff9e0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xf401}, 0x1c) [ 1181.028948] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1181.031523] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1181.104800] attempt to access beyond end of device [ 1181.140403] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1181.152727] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1181.164365] loop2: rw=2049, want=6434, limit=52 [ 1181.187481] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1181.202978] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1181.216555] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000006d90000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:15 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000000038044c0019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xfc00}, 0x1c) [ 1181.325077] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1181.427145] audit: type=1800 audit(1590028575.671:280): pid=9889 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=16228 res=0 [ 1181.439853] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1181.489061] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1181.495101] EXT4-fs (loop1): mount failed 02:36:15 executing program 4: syz_open_procfs(0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f87e56f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e1ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba4084e7a3b0c6c699890e19745ba9a37cfdd7ff58b659bbf65d6a2b2"], 0x9d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) close(r1) shmdt(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000000c0)={0x6}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 02:36:15 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e22, 0x8001, @mcast1, 0x1}, {0xa, 0x4e21, 0x7, @mcast1, 0x3}, 0xf13c, [0x2890, 0x8, 0x90000, 0x1, 0x3, 0x2, 0xcba7, 0x8]}, 0x5c) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000500)={0x1ff, 'wel'}, 0x6) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000480)=""/10, &(0x7f00000004c0)=0xa) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000240)='./file1\x00', 0x9, 0x2, &(0x7f0000000340)=[{&(0x7f0000000280)="d179a4407781bd3af7f5d0e07797cfc842cad2c6cce2028ec354a26c1897e4d5061bc9126f723b4d1e47dc739916e89e134b40a9119b9197cf92c188019b7d761064114ce25216443b0cbc13976a13232584995e910f805bd2f5439fd28218506f2f28ac21df950c570b3347b3424e3eddd6b50f7672e1b080e8dbd728bc", 0x7e, 0x3}, {&(0x7f0000000300)="bb89c1526ac5db0ff90105eba828c5f177bf4753646bca4bcf1fe089ca014762d2b2b4535059aa2cf98455fc190a3fe0", 0x30, 0x13}], 0x2002, &(0x7f0000000380)={[{@gid={'gid', 0x3d, r1}}, {@gid={'gid', 0x3d, r2}}, {@umask={'umask', 0x3d, 0x7}}, {@part={'part'}}, {@decompose='decompose'}, {@part={'part', 0x3d, 0x7}}, {@nodecompose='nodecompose'}, {@decompose='decompose'}, {@umask={'umask'}}], [{@audit='audit'}, {@subj_type={'subj_type', 0x3d, '*vboxnet1'}}]}) 02:36:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000fffffff00000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xfe80}, 0x1c) [ 1181.646495] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1181.671897] minix_free_inode: bit 1 already cleared 02:36:16 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1181.795788] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:16 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804600019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xfec0}, 0x1c) [ 1181.865488] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1181.890903] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1181.957181] attempt to access beyond end of device 02:36:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000000fffe0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1181.986065] loop2: rw=2049, want=6434, limit=52 [ 1182.016189] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1182.036797] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1182.047551] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1182.070306] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1182.082891] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xff00}, 0x1c) [ 1182.115008] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1182.126171] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000000000fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1182.162957] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1182.178962] EXT4-fs (loop1): mount failed 02:36:16 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804680019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1182.218588] minix_free_inode: bit 1 already cleared [ 1182.279604] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xff0f}, 0x1c) [ 1182.348240] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1182.443893] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:18 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6000000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000007fffffff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x50000}, 0x1c) 02:36:18 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000000038046c0019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:18 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)={0x800, 0xc, 0x4, 0x20000000, 0x5, {0x77359400}, {0x1, 0x1, 0x25, 0x8, 0x0, 0x5, "8c82d29e"}, 0x8, 0x1, @planes=&(0x7f0000000240)={0x8, 0x9, @userptr=0xffffffff, 0x184}, 0x5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x104, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x9, 0xffffffff}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x4000003}}, 0x10) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r3, r4, 0x0, 0x5, &(0x7f0000000580)='eth0\x00', r2}, 0x30) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000480)={'ip6gretap0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="1d00000006000000010000000000000000000000000000000900e2ff000000000000002000"/56]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00', r2}, 0x30) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0x0, 0x110001) lseek(r6, 0x0, 0x3) dup3(r5, r6, 0x0) 02:36:19 executing program 4: unshare(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7, 0x4b, 0x1}, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) exit_group(0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1b) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) sched_getparam(r5, &(0x7f0000000240)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010420e77c1400"/30, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c00010001000000746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="8003241821910ee14bfdb94de6ffe44f57"], 0x44}}, 0x40000) [ 1184.777589] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x1000000}, 0x1c) 02:36:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000ffffffff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1184.825884] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1184.853070] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:19 executing program 4: r0 = socket$inet(0xa, 0x80805, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x22}, @exit], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x185, 0x10, 0x0}, 0x3f) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000040)="88", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x98) [ 1184.905224] attempt to access beyond end of device [ 1184.912361] loop2: rw=2049, want=6434, limit=52 [ 1184.920491] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1184.936962] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x2000000}, 0x1c) [ 1184.961204] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1184.965654] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:19 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804740019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1185.056128] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1185.069769] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1185.089136] minix_free_inode: bit 1 already cleared 02:36:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000f0ffffffffffff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1185.130865] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1185.145831] EXT4-fs (loop1): mount failed [ 1185.210545] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1185.253372] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1185.319482] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1185.337372] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1185.347342] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1185.356819] EXT4-fs: failed to create workqueue [ 1185.364695] EXT4-fs (loop1): mount failed 02:36:19 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x7fffffffffffffff, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x3000000}, 0x1c) 02:36:19 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f7}], 0x2008084, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000008782612ced4938ee58f98a000000000000000000000000000000000000000000002008000000000000140400000c000000000000000aaaaaa90000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000"]}, 0xa08) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xfffffffd}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x6}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x40}}, 0x8800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2480005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b00)={0x1024, r0, 0x68253c46e8ac2b9f, 0x70bd28, 0x25dfdb7c, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8b, 0x403e}}]}, 0x1024}, 0x1, 0x0, 0x0, 0x4008045}, 0x10) 02:36:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = accept(r1, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x101}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 02:36:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:19 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000000038047a0019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x4000000}, 0x1c) [ 1185.481562] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 1185.493543] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 1185.555676] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1185.558103] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1185.588051] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1185.596925] minix_free_inode: bit 1 already cleared 02:36:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000030000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1185.633396] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1185.668856] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 02:36:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x5000000}, 0x1c) 02:36:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1185.684595] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 1185.723525] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1185.773595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1185.801234] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:36:20 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000319000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1185.823820] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1185.853810] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1185.870419] minix_free_inode: bit 1 already cleared [ 1185.909639] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1185.932947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1185.946911] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1185.953944] EXT4-fs (loop1): mount failed [ 1186.002841] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1186.074710] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1186.176211] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1186.207574] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1186.216935] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1186.228675] EXT4-fs: failed to create workqueue [ 1186.233642] EXT4-fs (loop1): mount failed 02:36:20 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8000000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x6000000}, 0x1c) 02:36:20 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x4, 0x0, &(0x7f0000000000), 0x2010080, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000050000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:20 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804fa0319000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1186.333057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:20 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000240)="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", 0x310, 0x34f9}], 0x80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x0, 0x30}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r2, 0x6, 0x4c, "4439994dac769c7af97d51c6c98780ce7d5d2b3b13913d82fe36606fe4984c468f7f490d87a8def5b447c4ee6e0809406f0194933f7f5598f7b81b19ebb0de0224b1ffcad921995b4eba6fb7"}, 0x54) r3 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000040)) 02:36:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x7000000}, 0x1c) 02:36:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1186.450355] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x8000000}, 0x1c) 02:36:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1186.544823] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1186.617860] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1186.641949] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:36:20 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804100419000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1186.678968] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1186.713987] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1186.772215] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1186.802179] EXT4-fs (loop1): mount failed [ 1186.908801] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1186.927198] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1186.956957] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1186.983322] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1187.005988] EXT4-fs: failed to create workqueue [ 1187.016454] EXT4-fs (loop1): mount failed 02:36:21 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8cffffff00000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x9000000}, 0x1c) 02:36:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:21 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000519000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000e0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1187.249757] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1187.321640] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1187.343838] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1187.357345] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1187.381425] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1187.387813] EXT4-fs (loop1): mount failed 02:36:21 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) memfd_create(&(0x7f00000000c0)='minix\x00', 0x4) 02:36:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xa000000}, 0x1c) 02:36:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:21 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000619000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1187.432505] audit: type=1800 audit(1590028581.681:281): pid=10246 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=16408 res=0 02:36:21 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf5ffffff00000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xe000000}, 0x1c) 02:36:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1187.613300] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1187.636063] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1187.672698] attempt to access beyond end of device [ 1187.677926] loop2: rw=2049, want=6434, limit=52 [ 1187.683767] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:22 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000719000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xf270000}, 0x1c) 02:36:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1187.842185] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1187.857996] minix_free_inode: bit 1 already cleared [ 1187.881642] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1187.908165] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1187.932098] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x18020000}, 0x1c) 02:36:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000004c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:22 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) recvfrom$l2tp(r0, &(0x7f0000000240)=""/225, 0xe1, 0x10001, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) flock(r1, 0x1) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L+', 0x989}, 0x16, 0x1) [ 1188.007313] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1188.018417] EXT4-fs (loop1): mount failed [ 1188.025798] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000600000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x20000000}, 0x1c) 02:36:22 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000919000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1188.145523] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1188.221037] attempt to access beyond end of device 02:36:22 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf6ffffff00000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1188.245078] loop2: rw=2049, want=6434, limit=52 [ 1188.296816] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x34703cb1}, 0x1c) 02:36:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000680000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1188.354996] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1188.370268] audit: type=1800 audit(1590028582.621:282): pid=10309 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=16410 res=0 02:36:22 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = socket(0x11, 0x2, 0x200) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x3f000000}, 0x1c) 02:36:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000006c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1188.469572] minix_free_inode: bit 1 already cleared [ 1188.485249] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:22 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804041019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1188.584293] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1188.612599] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000740000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1188.654884] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1188.664926] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x40000000}, 0x1c) [ 1188.701470] attempt to access beyond end of device [ 1188.713925] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000007a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1188.776438] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1188.783442] loop2: rw=2049, want=6434, limit=52 [ 1188.813841] EXT4-fs (loop1): mount failed 02:36:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x40020000}, 0x1c) [ 1188.820475] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000f00000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1188.928604] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:23 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xfbffffff00000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x420e12e4}, 0x1c) 02:36:23 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804001f19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:23 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1189.097891] minix_free_inode: bit 1 already cleared 02:36:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x54000000}, 0x1c) [ 1189.219529] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x8dffffff}, 0x1c) [ 1189.299372] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1189.325736] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1189.331871] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1189.334638] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1189.369227] attempt to access beyond end of device [ 1189.393753] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1189.397035] loop2: rw=2049, want=6434, limit=52 [ 1189.431604] EXT4-fs (loop1): corrupt root inode, run e2fsck 02:36:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000600000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:23 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804002019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0x91ffffff}, 0x1c) [ 1189.455814] EXT4-fs (loop1): mount failed [ 1189.467113] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xb13c7034}, 0x1c) [ 1189.569654] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1189.587990] minix_free_inode: bit 1 already cleared 02:36:23 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xfeffffff00000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000d90600000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1189.705003] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:24 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/186, 0xba}, {&(0x7f0000000540)=""/106, 0x6a}], 0x3, &(0x7f0000000600)=""/53, 0x35}, 0x2002) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800bc26", @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x8844}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000ac0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080329bd7000fbdbdf2504000000080007007f000001140006002001000000000000000000000000000108000c0002000000080007000000000014000600fe80000000000000000000000000001008000400000000000800040001000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000c0}, 0x24000040) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) unlinkat(r0, &(0x7f00000000c0)='./file1\x00', 0x200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x110001) lseek(r5, 0x0, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000300)={@mcast1, r6}, 0x14) 02:36:24 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804002219000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xe4120e42}, 0x1c) 02:36:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1189.868747] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1189.878685] nla_parse: 19 callbacks suppressed [ 1189.878695] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1189.909748] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1189.933419] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1189.951364] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xe8030000}, 0x1c) 02:36:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b80000001300010000000000000000010101000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000"], 0xb8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000000c0)={r2, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(0xffffffffffffffff, 0x3, 0x2) recvfrom$l2tp6(r3, &(0x7f0000000040)=""/55, 0x37, 0x20, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x20) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000000)={r2, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x3c7041, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000200)={0x9e, 0x8, [0x2e5, 0x11fa, 0x5, 0x7, 0x8afa], 0x1}) ioctl$FIBMAP(r5, 0x1, &(0x7f00000001c0)=0x80) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x3, 0x4}) time(&(0x7f0000000240)) [ 1189.996913] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1190.001142] attempt to access beyond end of device [ 1190.011998] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:24 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804002319000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1190.044712] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1190.055408] EXT4-fs (loop1): mount failed [ 1190.076271] loop2: rw=2049, want=6434, limit=52 [ 1190.103569] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1190.116900] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xf4010000}, 0x1c) 02:36:24 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xff0f000000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:24 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) link(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') ptrace$cont(0x9, r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) inotify_add_watch(r4, &(0x7f0000000200)='./file1\x00', 0x42000810) fcntl$setown(r2, 0x8, r3) 02:36:24 executing program 4: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = socket(0x11, 0x2, 0x200) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1190.251722] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1190.255290] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1190.275205] minix_free_inode: bit 1 already cleared 02:36:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xf5ffffff}, 0x1c) 02:36:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000e00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1190.381078] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1190.392214] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1190.414421] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1190.444253] attempt to access beyond end of device 02:36:24 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804002c19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xfc000000}, 0x1c) [ 1190.464455] loop4: rw=2049, want=6434, limit=52 [ 1190.481055] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000f00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1190.508180] Buffer I/O error on dev loop4, logical block 3216, lost async page write 02:36:24 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) 02:36:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x1, 0x5, [@link_local, @local, @remote, @random="fe92a600902a", @broadcast]}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '/'}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) [ 1190.597861] minix_free_inode: bit 1 already cleared [ 1190.604491] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1190.625987] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1190.636910] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xfe800000}, 0x1c) 02:36:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1190.652608] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1190.664635] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1190.675437] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1190.680461] minix_free_inode: bit 1 already cleared [ 1190.682055] EXT4-fs (loop1): mount failed [ 1190.852335] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1190.868686] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1190.911865] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1190.922565] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1190.926849] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1190.951973] attempt to access beyond end of device [ 1190.968934] loop2: rw=2049, want=6434, limit=52 [ 1190.973645] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1191.015966] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1191.047779] EXT4-fs: failed to create workqueue [ 1191.052478] EXT4-fs (loop1): mount failed 02:36:25 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xffff1f0000000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xfec00000}, 0x1c) 02:36:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000003f00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:25 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804002d19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:25 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000580)={0x2}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x250, 0x250, 0x250, 0x0, 0x0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x3, 0x0, {[{{@ipv6={@dev, @loopback, [], [], 'team_slave_1\x00', 'nr0\x00', {}, {}, 0x87}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'ip_vti0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x9}}}, @common=@mh={{0x28, 'mh\x00'}, {"c7fd"}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'team0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) [ 1191.107531] audit: type=1800 audit(1590028585.362:283): pid=10604 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=16410 res=0 [ 1191.174732] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xff000000}, 0x1c) [ 1191.217803] minix_free_inode: bit 1 already cleared [ 1191.227526] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @private=0xa010100}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) syz_mount_image$jfs(&(0x7f0000000740)='jfs\x00', &(0x7f0000000780)='./file0\x00', 0x101, 0x4, &(0x7f0000001980)=[{&(0x7f00000007c0)="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", 0x1000, 0x3}, {&(0x7f00000017c0)="dd6cd3abfb46b40dbe1aa483ef5e1236b88138dfef7b2317b9a1d243a153418ba7ed3c815ad9a1", 0x27, 0x7fffffff}, {&(0x7f0000001800)="b44777a85fbe21c7fef5e69dad5404066f3d27bf3174ad81ee0d957dc163e65c7b160fa7ffc32bfb7640dc9aadcc928ef957b163a728e1b084aeccfd9ebab77af8c1947eaf304babeb48a35d120c76826e707d10be6b0a2fc9b029a62a583c026afb7139b56f3a0c7c1950", 0x6b, 0x6}, {&(0x7f0000001880)="20e0aedd4e85fd35d99d4b51620a096d746e1e4c761c200b2745260d131e2845f30be168bca73b5c946abdbaa9f808ac58307e0d7440f0dce02d3acec3526258df09b89aa90b98c262ac4683f575984dc9de6fd20717cf836afa36fb7bd9dc7e967eed54d902eeb3a336fd582462c1c89bc3e53b8ccf7332b67207addee9f5392e90eb82483a0c115b7aa38288d08fd92230be140be93c4d7452f76eaf8c67d1180cf78c27d0b80cd5716d009c62c227f077f686686c8a97e8dbfe9449990a943d48d64110d61c52a8e468063a88afbd1e059b6b91019b3271f964733fb4f933aaba01cf06e06e292bea05ee69a5719ac111a20d", 0xf4, 0x7}], 0x80, &(0x7f0000001a00)={[{@nointegrity='nointegrity'}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@usrquota='usrquota'}, {@uid={'uid'}}], [{@dont_measure='dont_measure'}, {@uid_gt={'uid>', r3}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0x0, 0x110001) lseek(r6, 0x0, 0x3) recvmsg$can_bcm(r6, &(0x7f0000000680)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f00000004c0)=""/78, 0x4e}], 0x2, &(0x7f0000000580)=""/218, 0xda}, 0x2000) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f00000006c0), &(0x7f0000000700)=0x30) setreuid(0x0, r5) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x82, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,rq=0x0000000000000100,access=', @ANYRESDEC=r5, @ANYBLOB="2c72713d3078303030303030303030303030303030362c72713d3078303030303030303066666666666666662c6163636573733d616e792c72713d3078303030303030303030303030303037662c72713d3078303030303030303030303030303430312c74696d656f75743d3078303030303030303066666666666666662c72713d3078303030b03030303030303030663533622c7365636c6162656c2c736d61e75f6673726f6f743d2c7569643e", @ANYRESDEC, @ANYBLOB=',rootcontext=unconfined_u,fsmagic=0x0000000000000165,context=user_u,measure,hash,\x00']) 02:36:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xff0f0000}, 0x1c) [ 1191.348649] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1191.354807] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1191.373056] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:25 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804003f19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000004800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1191.442914] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1191.462092] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1191.494266] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1191.521199] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1191.530446] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xffffff8d}, 0x1c) [ 1191.547992] EXT4-fs (loop1): mount failed [ 1191.555889] audit: type=1800 audit(1590028585.802:284): pid=10643 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="memory.stat" dev="sda1" ino=16410 res=0 [ 1191.618249] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:26 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff00000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000004c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[{@creator={'creator', 0x3d, ')qPp'}}]}) 02:36:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xffffff91}, 0x1c) 02:36:26 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r7, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r8, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010001000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="02000300", @ANYRES32=r2, @ANYBLOB="02000500", @ANYRES32=r4, @ANYBLOB="040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="81488b5b3916630c9a17e7392d271228de7aee43d14c89e49d6dd4354566fcac0344a165f2548e70b91b0872", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB='\b\x007\x00', @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="10000400000000002000070000000000"], 0x74, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1191.783986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1191.813289] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty, 0xfffffff5}, 0x1c) 02:36:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000655800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1191.836702] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:26 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804004019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1191.888282] attempt to access beyond end of device [ 1191.893246] loop2: rw=2049, want=6434, limit=52 [ 1191.924490] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1191.935811] hfsplus: unable to find HFS+ superblock 02:36:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0xfffffffc, "95f8eddb7bfc2f1c395ce91877c974c73d5fceb41be7e829e65fb61f825b7d60", 0x2, 0xea02fdb1, 0x615, 0x80000, 0x2}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x800, 0x0) r1 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x444d1859104e7b13, 0x0, 0x110001) lseek(r2, 0x0, 0x3) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000000100)="0f19", 0x2, 0x0, 0x0, 0x1, r1}, &(0x7f0000000200)) 02:36:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000006000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1192.013870] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1192.023392] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1192.033372] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x17) 02:36:26 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x10000000002) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r5, 0x6, 0x4, 0x200110001) lseek(r5, 0x0, 0x3) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000000c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000180)={{0x9, 0x1, 0x6, 0x3, '\x00', 0x40}, 0x2, 0x40, 0x0, r7, 0xa, 0x8, 'syz1\x00', &(0x7f0000000080)=['\x00', '\x00', 'memory.stat\x00', 'memory.stat\x00', '[\x00', 'vmnet1$[\x00', '.\x00', '\x00', '\x00', 'memory.stat\x00'], 0x35, [], [0xfff7, 0x8, 0x0, 0x270e]}) [ 1192.072149] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1192.078314] EXT4-fs (loop1): mount failed [ 1192.098814] minix_free_inode: bit 1 already cleared [ 1192.105733] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1192.159620] mmap: syz-executor.4 (10728) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1192.194044] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1192.197758] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1192.225285] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1192.259181] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1192.269718] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 1192.293516] EXT4-fs: failed to create workqueue [ 1192.303384] EXT4-fs (loop1): mount failed 02:36:26 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804004819000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000586500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x20070000) 02:36:26 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xffffffffffff0700, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:26 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000037b857771edff882895ffdce47aa7af9feef1d9919e0fecc4ec0ee6da0ade8212453a8340e4af38c52d0ad1573b29777c5363bd0ce7d6db3eb6ef23f394b1846ca42386c88cc05000000000000bb38275da10ac7b1317640b95a740d8241f137419c46434e9b42fbf01df0bf3739129587353c295f040ce1f5c92d3325f40f41fbd2237e0ec3ed7cf6b14a28b31ab91d46537c7cf7b7cce63433ac8122ba8a30c94da76176c69b1930bd9fed1eabc08bf02169a25c57a277c4b4"], 0x28}}, 0x0) [ 1192.386584] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 02:36:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000006800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:26 executing program 3: r0 = socket$inet6(0xa, 0x6, 0xfffffffd) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xe0d1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000200)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x404d40, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000100)) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x81, "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"}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 1192.511480] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000006c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1192.603251] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:26 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x7fff, 0x6, 0x4, 0x4000000, 0x3, {0x0, 0x2710}, {0x0, 0x0, 0x37, 0x0, 0x82, 0x3, "cb9a63a2"}, 0x6, 0x3, @planes=&(0x7f00000000c0)={0x20, 0x7fffffff, @userptr=0x4bb1, 0x7}, 0xffffffff, 0x0, 0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000002c0)=""/135, &(0x7f0000000380)=0x87) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r1, 0x0) setfsgid(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) finit_module(r3, &(0x7f00000001c0)='eth0.F^mime_typeppp1-\x00', 0x2) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="4b0000000600000000000000000000000300000000ddffff020000000000000022000000000000006574683173797374656d706f7369785f61636c5f6163636573736b657972696e677d0086f1397dce5f78e9c87896d1446f66272797b3ecf5223f54ffb5f508ea0368de45e99400c4cdd13f3e3a5b57db023748721fb0f40b81c4a303f38bb155"], 0x4b) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) dup(r1) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) 02:36:26 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804004c19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1192.711796] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1192.726493] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1192.743366] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000007400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1192.762573] attempt to access beyond end of device [ 1192.780673] loop2: rw=2049, want=6434, limit=52 [ 1192.792835] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1192.800998] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty, @in=@private}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) [ 1192.812170] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000007a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1192.871868] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1192.886326] audit: type=1800 audit(1590028587.142:285): pid=10790 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=16464 res=0 [ 1192.895369] EXT4-fs (loop1): corrupt root inode, run e2fsck 02:36:27 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804006019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1192.993009] EXT4-fs (loop1): mount failed [ 1193.027774] minix_free_inode: bit 1 already cleared [ 1193.138519] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1193.185461] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1193.215531] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1193.254039] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1193.281164] audit: type=1800 audit(1590028587.532:286): pid=10760 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="memory.stat" dev="sda1" ino=16457 res=0 [ 1193.286750] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1193.383208] EXT4-fs: failed to create workqueue [ 1193.433389] EXT4-fs (loop1): mount failed 02:36:27 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xffffffffffffff7f, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:27 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) write$FUSE_OPEN(r0, &(0x7f00000000c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) creat(&(0x7f0000000200)='./file0\x00', 0x504583ede3f27812) 02:36:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbffbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 02:36:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:27 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804006819000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22009}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendto$inet6(r0, 0x0, 0x0, 0xfffffefff9ffffee, &(0x7f000006ffe4)={0xa, 0x4e23, 0x3, @empty, 0x800000}, 0xfb015cfac6c9de4c) 02:36:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000006d900000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1193.653450] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1193.680974] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:28 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804006c19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000f000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1193.818400] attempt to access beyond end of device [ 1193.823372] loop2: rw=2049, want=6434, limit=52 [ 1193.842780] audit: type=1800 audit(1590028588.092:287): pid=10868 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.stat" dev="sda1" ino=15797 res=0 [ 1193.887011] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:28 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x10, 0x4) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1193.970389] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1193.982201] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000fffe00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1194.025238] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1194.036479] minix_free_inode: bit 1 already cleared [ 1194.064417] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1194.107103] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1194.110679] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1194.112866] EXT4-fs (loop1): mount failed 02:36:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000fff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1194.263821] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1194.307125] attempt to access beyond end of device 02:36:28 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1194.333513] loop2: rw=2049, want=6434, limit=52 02:36:28 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804007419000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000feff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1194.365118] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:28 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x20240, 0x0) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f00000000c0)='ocfs2\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x6c57, 0x2, &(0x7f0000000340)=[{&(0x7f0000000200)="aca73b8e0fe7bfdce618f8e535f15cbde81544e10d19440904984436e79566fba1ef58466c2013d2f5e08dc2b69b556a6d77b047753b6c7639eb572502132ccce81883d91f97f07f202d382b86868a8bca97f3a1ca829fdf1120bd869f54849230bd1d2458efc37e2e031b593d88d31f9b1a3fbaf670b7a361a0f54030f87c0d23bd988a7572681afdf11d67e709b09e77a4825b59eab277", 0x98}, {&(0x7f00000002c0)="92d9903c2eb8503abf1d1bbe4f91726285056d4a0dcc6bae880ebdf67df3f65886ccd14d951a712c2be915a86d1de6b41eaf316473eccb920b3a735dd3475f5c3157f7ae77b0a9ada013039360c3df5513751a5849f16c3c63daa8d566784259ec716d71c6ed2e62d20f5fbbf7db5abaec7ff1", 0x73}], 0x2210000, &(0x7f0000000380)='+securityvmnet0\x00') creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000440)={0x10000, 0xffffffff, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x990af5, 0x7, [], @p_u16=&(0x7f00000003c0)}}) fchmodat(r1, &(0x7f0000000480)='./file0/file0\x00', 0x196) 02:36:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000004003000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1194.512690] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1194.517557] minix_free_inode: bit 1 already cleared [ 1194.578167] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1194.607912] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 02:36:28 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804007a19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1194.642134] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1194.652411] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:36:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'vxcan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48e9000000002a0500"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2480005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000008a40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000009580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000009540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c0a0000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="3401028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040024c4000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000f8ff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400fffffeff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400c81e000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e80102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="740102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400fea10000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="780002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="940102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400810000003c00010024000100757365725f6c69836b75700000000000000000000000000000000000000000000500030006000000040004000800060022bad09cbe", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="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"], 0xa8c}, 0x1, 0x0, 0x0, 0x20000041}, 0xc0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000000)={{0x0, 0x0, @reserved="4b616ad8a4babdf6a554fd7eb691b65c4b4410d43ba15e89eb9e0c5a441e3f09"}}) [ 1194.707813] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1194.734285] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1194.744393] EXT4-fs (loop1): mount failed [ 1194.774977] attempt to access beyond end of device [ 1194.781082] loop2: rw=2049, want=6434, limit=52 [ 1194.800839] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1194.821400] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000340000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1194.873816] audit: type=1800 audit(1590028589.122:288): pid=10948 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=16497 res=0 [ 1194.892614] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000fffff0000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1194.927433] nla_parse: 15 callbacks suppressed [ 1194.927442] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:29 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="030084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:29 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="600000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1195.004747] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1195.017886] audit: type=1800 audit(1590028589.212:289): pid=10946 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.stat" dev="sda1" ino=16495 res=0 02:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, [], 0x1}, 0x3f}, 0x1c) [ 1195.057652] minix_free_inode: bit 1 already cleared 02:36:29 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80000000380403fa19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1195.126429] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000030000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1195.269115] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1195.290276] EXT4-fs (loop1): inodes count not valid: 96 vs 128 [ 1195.291652] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {r4, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x101, @private2, 0x2}, @in6={0xa, 0x4e22, 0x10001, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2c}}, 0x3}}}, 0x118) [ 1195.416893] attempt to access beyond end of device [ 1195.422070] loop2: rw=2049, want=6434, limit=52 [ 1195.432281] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:29 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1195.464262] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1195.490683] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:29 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000001c0)="b849192de9425589e335a90317d6a994bdfd3494b77e89df1ef14a0e626a83a0199f473baa97498cf97f77d6315d0333991bd8bb3f8785e2175d51307609fa6292573e6acb98f1f89a97d03cf9ac265d8499c6ded8ba17153f7702df76393446943b90e963a4dbda15a829633915d9988597e55dffd112b6f5c6e56b49be62da1979feef7b27d6a9381dd3e364d8c3ec16efebfdc6dbd4cbe233322315bc3fbf417b5eb4aadbc32120fdebd9623c9169dfc9b2301e09d738b1fdba8635fa54ae9885a56f7029f41484ea0e9a9664f31907f970a4b3ba14d9471919906f009833") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000000c0)) [ 1195.578314] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1195.587830] minix_free_inode: bit 1 already cleared 02:36:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000050000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1195.629611] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 02:36:30 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000000038040fff19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1195.787030] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1195.893392] EXT4-fs (loop1): inodes count not valid: 640 vs 128 [ 1195.926336] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1195.975732] minix_free_inode: bit 1 already cleared 02:36:30 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800300003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1196.052803] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1196.078283] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1196.100015] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:30 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000007000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000070000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1196.163830] attempt to access beyond end of device [ 1196.174689] loop2: rw=2049, want=6434, limit=52 [ 1196.202095] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1196.265872] audit: type=1800 audit(1590028590.512:290): pid=11047 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="memory.stat" dev="sda1" ino=15908 res=0 [ 1196.305423] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1196.323681] EXT4-fs (loop1): inodes count not valid: 896 vs 128 [ 1196.332984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000a0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1196.387190] minix_free_inode: bit 1 already cleared 02:36:30 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xffffffffffffffff, 0x110001) lseek(r0, 0x0, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000000c0)={0x7, 'wg0\x00', {0x9}, 0x8000}) [ 1196.511668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:30 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1196.553562] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000c0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:30 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000219000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1196.695620] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000e0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1196.792776] attempt to access beyond end of device [ 1196.809960] EXT4-fs (loop1): inodes count not valid: 1152 vs 128 [ 1196.826448] loop2: rw=2049, want=6434, limit=52 02:36:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000000f0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1196.866554] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1196.877902] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:31 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800500003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1197.006803] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1197.057227] minix_free_inode: bit 1 already cleared 02:36:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000100000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:31 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000319000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000200000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000003f0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1197.246242] EXT4-fs (loop1): inodes count not valid: 1408 vs 128 [ 1197.306126] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:31 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0xea60}, {0x77359400}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) chdir(&(0x7f0000000240)='./file0\x00') fallocate(r3, 0x0, 0x2000000, 0x110001) lseek(r0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x2080, 0x0) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x501480, 0x38) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0x0, 0x6}, 0x10) 02:36:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000008782612ced4938ee58f98a000000000000000000000000000000000000000000002008000000000000140400000c000000000000000aaaaaa90000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x5461, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x3}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48804}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x800, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000240007050000014007a248000500000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffdbfbbfbf, &(0x7f0000000340)={0xa, 0x4e02, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 02:36:31 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800600003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1197.459957] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1197.544882] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000480000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:31 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000419000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1197.592801] attempt to access beyond end of device [ 1197.607413] loop2: rw=2049, want=6434, limit=52 [ 1197.643353] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) fallocate(r2, 0x44, 0x2, 0x110004) lseek(r1, 0x0, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_bond\x00', {0x4}}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000002c0)=0x3ff, 0x4) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101040, 0x0) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x103, @loopback, 0x8000000}, 0xffffffffffffff5d) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 02:36:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000004c0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1197.745691] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1197.753211] attempt to access beyond end of device [ 1197.759217] EXT4-fs (loop1): inodes count not valid: 1664 vs 128 [ 1197.780048] loop2: rw=2049, want=6434, limit=52 02:36:32 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000519000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1197.818922] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000600000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:32 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffde2}, {&(0x7f00000003c0)=""/102388, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xa8, &(0x7f0000000140)="f7e77d0076cc03592a160500000032111ca70404f598a56f7259e480249950f34c82a153eeffffffff1334699798134f5af37112f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232121a088f35f3681e33b05884012ce6e5f8844d19a16018e32d48041cdd4dabd5b30a5be8d2c4cd35f96bef7005cc248a2f6a4fbdbc83823fa035cdd1231c0c256e393a3f91d45672453e023c5744519271a106000000da"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0/file0/file0\x00', 0x23) 02:36:32 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800700003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0xfff, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r3, 0x19}, 0x10) [ 1197.967791] minix_free_inode: bit 1 already cleared 02:36:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000058650000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:32 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffdbfbb7af, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1198.072824] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000680000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1198.182882] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1198.206396] EXT4-fs (loop1): inodes count not valid: 1920 vs 128 02:36:32 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x4240, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000000)=0x96c) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1198.238129] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1198.268958] attempt to access beyond end of device [ 1198.274410] loop2: rw=2049, want=6434, limit=52 [ 1198.281877] Buffer I/O error on dev loop2, logical block 3216, lost async page write 02:36:32 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000619000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000006c0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1198.372767] EXT4-fs (loop1): inodes count not valid: 1920 vs 128 02:36:32 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800900003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:32 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000)) 02:36:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000740000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1198.444567] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1198.523461] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1198.633918] audit: type=1800 audit(1590028592.882:291): pid=11264 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.stat" dev="sda1" ino=16507 res=0 [ 1198.749142] EXT4-fs (loop1): inodes count not valid: 2432 vs 128 [ 1198.862048] EXT4-fs (loop1): inodes count not valid: 2432 vs 128 02:36:35 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)={0x1, 0xd000}) 02:36:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000007a0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:35 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000719000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000002c0)=0xffffffff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x4}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="2da0ab8b8142f37785fe1aa591aeaf31e80ae44d3caf3cb78f46f650fea5b918b7a08761f7cf5aa31fba", 0x2a}, {&(0x7f0000000180)="69ffcd83d32c68d52dd52850540f25934ebfa8d827ae76923723dd0848b6812fe8284e72668401251c77bdfdb70bf0567b27514d5b44736d4c871d531bef22967b275a37f7bfa8185be2dd3b0656f8c323c1a73b132e992a981852aaadd6e778fe78f1aa16fc96faee3c1ab2d08d283d1318bf555e84aaac45b32a1562c0fcd0aa9c325adfe7722a4b8bc6a1454b4847db8e420ade7965abebb9720f534b9849e9e4e3af411b6d11ae0681eb527ffc8b7e0dd96acf418595d24de7521059caa80f6927eb4a136eeed3c6d4f66b8d42578dbdd2bb3b54477cae0b74f38b684438233342d1cc0cb06c", 0xe8}, {&(0x7f0000000300)="22d6b181deed9cef2e3cb61889f153f275a2f67436ebfc21dcf24b2635a45670c0838cf2d6ea3a585b21d82db8ecac9510553217a7f0fb7fdc773fa0c56cefcd35c6ebcf9eca3c6d41b07269312092e3b32c86ad7782aee981772e8d6bcb23c01535181b76b2d69ca039bbfd7f8d48d0a07d37489dd7b3d3857bf4efed031ddfbbfaa4679971b1fb6a5a046dec718fe226f44aa7e1bbd7c6e1e0857663b1fd41f76fc55bf6137fc55a1c0d3f8b804be2f71bcbe4e76f63d3ee3205b0577c08165341cfc62d15736904437d203dc0e121fd075be2228a", 0xd6}], 0x4, &(0x7f0000000400)="382bb484bae0740bc723b31462addb73e7f98698b7a3b0aacbb3efd0ece004f8cb8ce508940552f3efbd2b45283a32e20e14a75dcd1a93dc5f94aa6e6f396230b1e8a31d7a35ba531a7b0ec14cd3055d627b95c6d9486d66d018439f744db7f268ad695df9826370dfabaaa81b291f8802c1e3b9e474cb506c7d7e4dfc247725feae196ed7222aa97d8553319b668a09d8255cc66f427b42f4008475805a70cda2902a54b59924b0a2cb975d", 0xac, 0x200400d0}, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 02:36:35 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="802200003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1201.117000] minix_free_inode: bit 1 already cleared 02:36:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000810000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xca2a743061c7d58c, &(0x7f0000000000)=0x3fe, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @private1}, 0x1c) [ 1201.143957] nla_parse: 15 callbacks suppressed [ 1201.143967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1201.179918] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:35 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000919000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1201.308195] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1201.349577] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1201.365586] EXT4-fs (loop1): inodes count not valid: 8832 vs 128 02:36:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000ffffa8880000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1201.419082] attempt to access beyond end of device [ 1201.434133] loop2: rw=2049, want=6434, limit=52 [ 1201.459901] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1201.464372] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:35 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="802300003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1201.517034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000ffffff9e0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1201.587832] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1201.607107] minix_free_inode: bit 1 already cleared 02:36:35 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804002219000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1201.633292] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) mmap$perf(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x8, 0x40010, r2, 0x401) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1f, 0x3a3, @dev={0xfe, 0x80, [], 0x19}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 02:36:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000006d90000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:36 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) readlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)=""/234, 0xea) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r2, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4054}, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1201.782471] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1201.833560] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1201.846092] EXT4-fs (loop1): inodes count not valid: 9088 vs 128 02:36:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000fffffff00000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x38000) fcntl$setown(r1, 0x8, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/162) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1201.937361] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1201.956489] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1201.977063] attempt to access beyond end of device [ 1201.982027] loop2: rw=2049, want=6434, limit=52 02:36:36 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804002319000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1202.028880] EXT4-fs (loop1): inodes count not valid: 9088 vs 128 [ 1202.035292] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1202.060709] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:36 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="802c00003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:36 executing program 2: syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f8}], 0x84, 0x0) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) syz_mount_image$tmpfs(&(0x7f0000000240)='tmpfs\x00', &(0x7f0000000280)='./file0\x00', 0x1ff, 0x4, &(0x7f0000000580)=[{&(0x7f00000002c0)="6b1a55f498d8839dcb6abb25fc2c372faa1f9ab2e6ce6d666895c319c3c7a44eb75899b27f0db1f110096f24f65bb2652deff15ab531c9495be354b4477b9c08631a86df7d1121436ef8cbeff7784ecf489128ecf0ec136c6bde2020637c43dd7dd5f1d5", 0x64, 0x4}, {&(0x7f0000000340)="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", 0xfe, 0x6}, {&(0x7f0000000440)="5d8924f06ab83f5e2affbe1bac485b006e6d96b65ffcb8bb7ebab09ee968631a60d4ac10f5437ab3c62f767480967c3147cda74d9a3a2cff004f54c8cc8e3cb54a", 0x41}, {&(0x7f00000004c0)="0f50d3c96df7f251a683c2e65067217d2cbd4453eb3a16e806bbd7a63bf301b8c5b5330e1c7767e3efdc284680eb953ba5405622bf5bfb8bb2c67199a456f791a8a199d2a5bc38e5a2f958e7bf981565d6141bdbd3063741358d44ea95f524a6f900550e512e1cf78682b174a135370ce6e759e5e47b0094415e8d19082d4fd1ec3a1705d792f194861a5ddc", 0x8c, 0x4}], 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB='fowner>', @ANYRESDEC=r1, @ANYBLOB=',fsmag\x00\x00=0x0000000000000006,mask=^MAY_AP@END,context=system_u,\x00']) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@sha1={0x1, "bb9960458d3afd60cb10e29945773599927cb8b4"}, 0x15, 0x1) 02:36:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000000000fffe0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1202.166888] minix_free_inode: bit 1 already cleared 02:36:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = accept$packet(r1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000000c0)=@buf={0x7a, &(0x7f0000000040)="cc4b86bc32f6823099e5e795a14748410cb2c20b8c1f05a1c13c0b71cd8e4f869722585beb08fba793c73e4f705a0f74b8a842ba84f06551b7e4709be5f38cf654fb033ed195f688c36df2be7d25bc667ed224392eee4fcf35aba7f46e343b9b77b9404c197bc3de112b15c3efd44f3c32aec890cc690b25dab6"}) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1202.234859] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1202.257142] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000000fff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1202.309899] audit: type=1800 audit(1590028596.562:292): pid=11405 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.stat" dev="sda1" ino=16536 res=0 02:36:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) fadvise64(r1, 0x9, 0x848a, 0x3) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1202.354153] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1202.361769] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1202.373370] EXT4-fs (loop1): inodes count not valid: 11392 vs 128 [ 1202.407545] minix_free_inode: bit 1 already cleared 02:36:36 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804002c19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1202.454392] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:36:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000088a8ffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1202.528460] audit: type=1800 audit(1590028596.782:293): pid=11424 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.stat" dev="sda1" ino=16308 res=0 02:36:36 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="802d00003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) [ 1202.636672] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1202.671578] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1202.713589] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff00000000f0ffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:37 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804002d19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1202.813225] audit: type=1800 audit(1590028597.063:294): pid=11450 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.stat" dev="sda1" ino=16529 res=0 [ 1202.873180] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1202.944674] EXT4-fs (loop1): inodes count not valid: 11648 vs 128 [ 1202.952663] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000007fffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r3, 0x0, 0x30}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x8001, @ipv4={[], [], @remote}, 0x1ff}}, [0x10001, 0x100000002000000, 0x3, 0xfffffffffffffffb, 0x81, 0x4, 0xaa5, 0x80, 0x1, 0x2, 0x4, 0xf1a, 0x3ff, 0x0, 0x1000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x3f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}}}, 0x84) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 02:36:37 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="806000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1203.085150] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:37 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804004819000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000009effffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000f0ffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1203.307541] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1203.392251] EXT4-fs (loop1): inodes count not valid: 24704 vs 128 [ 1203.416930] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:37 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804004c19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:37 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800003003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1203.634753] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000003400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:38 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804006019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000fffffffffffff00000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1203.846253] EXT4-fs (loop1): inodes count not valid: 196736 vs 128 [ 1203.894433] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1203.967281] EXT4-fs (loop1): inodes count not valid: 196736 vs 128 02:36:38 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="801004003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:38 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804006819000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1204.281624] EXT4-fs (loop1): inodes count not valid: 266368 vs 128 [ 1204.291740] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:38 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800005003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1204.462379] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:38 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804006c19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000600", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1204.636677] EXT4-fs (loop1): inodes count not valid: 327808 vs 128 02:36:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) fallocate(r2, 0x46, 0xfffffffffffffffe, 0x110001) lseek(r1, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005150000000000000000000000000c7641f47538c9b386a0b1d57e80a319ae3cbb077cba4ab24e049990f9d5e722588d965ad42a388ddcbbbc3795f01cc71337f821e8abdc7acec482888f816a3d9f75b1b010c1657e7e8c926bbfc04b98a03a510b7df586d7f5a30ce2e45a405d51a4332363e768384ca482b3018b5b44cd23c8fb05162bd39e1d862491f44c1eb88ecabf5221cd5e8e6ba2433594a087df2001ca14bf1b2190debf0bfdca88e0c8a9713c9a2802d08c7ffffcd7a5d7481063e643aef1f1d91d0856bfe6338d247f7225be4c36c6f03090c67efe5192bafcbda657", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2480005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="68020000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="4c02028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010001004000010000000100656e61626c656400000000000000000000000000000000000000000000000000000003000600000000ec03000000060091730867771cd4460fde7bb0fe02b868b276829833bd03434d5a363edbf5f56e0ddd4e0d0da6ac1cd6b3637c726db7b499ed3a3c00000f3ed8fe203fd80c7b18ca68c644cbab32368fe146cefc92a55067e4c8fff1dd8f09ecea33b87e5d1aae26df3b8f725b3854", @ANYRES32=r8, @ANYBLOB="77000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004000010023ff01006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000700000000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040000001f80048000000300fe040400000001001f0409000000ca4a040001000000070009010300000068ff0100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040009000000"], 0x268}, 0x1, 0x0, 0x0, 0x20000080}, 0x18040) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbf, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty}, 0x1c) [ 1204.706780] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:39 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xf, r0, 0x5, &(0x7f0000000280)="8f2fb9fa2def40d2ede8cc3cffffa8c5e86e7842fd847464db9e341b0dab8d8b3bc84bffe4af316478dad1a4229491a678ed186661d0b35675") ptrace$cont(0x9, r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x102, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x9, 0xffffffff}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x4000003}}, 0x10) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r3, r4, 0x0, 0x5, &(0x7f0000000580)='eth0\x00', r2}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r1, 0x0, 0x2e, &(0x7f00000000c0)=',wlan1lo,}*[@posix_acl_accessmd5sum.-selinux)\x00', r2}, 0x30) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0xffff) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x3, 0x1, {0xffffffffffffffff, 0x0, 0x10000, 0x1, 0x4}, 0x1f}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @private2}, 0x34) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x5, 0x110001) lseek(r3, 0x0, 0x3) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x110001) lseek(r4, 0x0, 0x3) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000200)=0x14) sendto$packet(r4, &(0x7f0000000180)="7760ad28fb0d9978eec00ac0657d14e858fb13fb79e04bdf0db7beeaf0b9eb6ac0cd51b45c12a9608270037c34fc9a4a9a1df42216eee552474ea2f6b6539dc515adbf111a82aa49bc1f6e7645faec57e3dfb6d341a7452b8dcc4f35cff838ef6d67ac5c4d217d4c3624af", 0x6b, 0x840, &(0x7f0000000240)={0x11, 0x7, r5, 0x1, 0xc2}, 0x14) 02:36:39 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800006003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1204.878811] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:39 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x800000000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0xfffffffffffffe55, 0x403}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0x7, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000c40)=0x401, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="f32638b85b671cbe698b41f1206ae85b2d6234a0c94fd36a720c04f2af6ef721c511f03930bcc85d4a", 0x29}, {&(0x7f0000000200)="63b7443c2aaef3c97be7edb8675a8a3c2f465294109aff564f1ff535749a88e8042973303037f6865d18c82b6c2b31bf3162043a59e12b6cb05082ef868f37ed93fcf7ba00f6301c0a0d501fafe20c6f447eddacd8f6e5e632ef87d3e86db520945c690b6f6ba304f468d011fe95", 0x6e}, {&(0x7f0000000280)="8b0e0bc86b3f46d70b5c27ab4308fd7e07faa29b81f60e3a82b51040b56b41349e7d591a7e2287a57c3a685f1835", 0x2e}, {&(0x7f00000002c0)="bd4ec07f38398ca198bda5c18bf32bbb0306ceef2dd4056e7c89ad3404c031dbb172bcbaeb16f8ab226f8c9add99964459af367563de49067d7571f726bf42ec4af01b2c7570002f424a7864d7855ab9f1071279accf0aadde149fec56fa90e5a3", 0x61}, {&(0x7f0000000340)="ba603ddfb95dca07d555e2a03c9ecf3ae9e77b31269ef2f6c5d254c49c1000cdd4b7ac942179d842db5804c2f6bfe32bafb11ed4c84c19d7b9056ff08b71b506b32f85df2d675e6c44d07e9ad90d315799490d7c7dbb208f334d082e32c9ee62b7006a56059fc731ae843349b5139ad98e591bea83e3d5cf1c0c1845a645cae97ecf7590068917eb16f6e54b4384504447de7cb3c4b394b41a47e068baca04a80a5d50f17c1e17907cae7a1a06dfe25225b127a407f98d5918019f", 0xbb}, {&(0x7f0000000400)="74b9a8fabdcbd28e17159fae3a312fc7bf", 0x11}, {&(0x7f0000000440)="0b78b4039a471b806608ab5f81b90e293034d705c26b0ea16ed5c9e8478f75a8d56bfaae1ce162e63785a5bc29c92bf14a2872636dfea23dc24562290dfc8d11befc4ac4dfe7d5ceb39f9b8b5f560e82610dcfd4897b60dd7064ed903738852f1fc9538b051a33fcc2ed1e242218cb7901f23f3b581dc9687466115083a640e4eb4d3c78c278dba888c2d604bb24211531fa34e516aacc62945bc34264edb907205f8c7a395019b2ada77ae54b905fec71e415ef0f068f4e6e1d7f0026f6552e1ff8808c194ed9a9f2dd06437b806051ecccd37495a1245fc6bd1593c1ea8f3c4dd8c4648bccb0", 0xe7}, {&(0x7f0000000540)="26754b86561a19f7b6068f7c7d468dae41a37db3ff800519f37ed220121eb535d4ca49b6161269c089f5b906894f1fe462c6dea341b4a66b9d361ef80c57032c248a6880c801496d29a070a7d48da23a8c73ac579e315fc7b1209871bfd41973b81ee4f81285bce16bd65ebd806b120c4fd200c2355788de8340cbb03aa2cabb5409bcaca9865f6113cbefdc9f8eb5b3f4309dcee7d626df06de28af175a4d176f880c3d067dc4a5aa068098cebe48c461a63ea40b9c46589827dcdb7c2026306bc30f39a5669b41d965bc15a91e75a4675d11fa427dc13a312ec7c80cfe3efa8e3506", 0xe3}, {&(0x7f0000000640)}], 0x9, &(0x7f0000000ac0)=ANY=[@ANYBLOB="a8000000000000000000000007000000866600000003070d8703f678eaf99352788c95060200078bd5ac8896060875110ba30a6a0110731eaad34e69b8daec1bfa81d7ae676fe801910708a651fc3255c9353720fa05483b77010b061e793ee774be6cd1020e45acd951a97893a39b983254070f06e000000164010100000000008307f00a010100831bd27f000001e00000010a01010064010102ffffffffe00000020000000000"], 0xa8}, 0x4005) r2 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r3 = dup(r1) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000b80)={0x5, 0xc, 0x4, 0x70000, 0x1, {0x77359400}, {0x5, 0x3, 0xff, 0x2, 0x40, 0x7, "3d35a56f"}, 0x1, 0x3, @planes=&(0x7f0000000640)={0x2, 0xfffffffe, @mem_offset=0x7fff, 0x8000}, 0x9, 0x0, r2}) 02:36:39 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804007419000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/vcsu\x00', 0x1c5001, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000002000)=0x2c8b, &(0x7f0000002040)=0x2) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffdbffbf3e, &(0x7f000006ffe4)={0xa, 0x4e24, 0x0, @empty, 0x20}, 0xfffffffffffffeee) 02:36:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1205.101977] EXT4-fs (loop1): inodes count not valid: 393344 vs 128 02:36:39 executing program 3: r0 = socket$inet6(0xa, 0xa, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) r2 = dup2(r1, r0) sendmsg$unix(r2, &(0x7f00000005c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000080)="26a9905891365d182ba2d7bfcaa6354bed612a0443f57e35a66a1aee5bbd26a5a342a24320d939ece03395", 0x2b}, {&(0x7f00000000c0)="84c0fc0d47b79c5f2a8adcebef3d14609ac9fd59886bc146d3f97dee50bbee50d562ab538366bc7daff9f6c8fe8c6be66d19dfddf97681ef5e43b08de2549b5be1daf8a9fd999436719cab1d1e5ff2be097562b23b6255cd44c05cb648b6d25333ac0e3a91c83657f415dfb3cb7cfdc8e92dec5d1df2a22519e9213055453a", 0x7f}, {&(0x7f0000000140)="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", 0xfa}, {&(0x7f0000000300)="ba1d6e12438b97f0ce510e94299b5e3a57d3e1b5faf61754d900b57cc28571afab7ba5e0d9c20169dce2054ab628fd5bdef8aeeccf6b8f846e7c4198352bbcc6591954c4633b42bc9c5a0b872a2a519d867a23cc997569b1b5bf6657e1be37a1b54900e42c50c1e19123ab38eb39df1b46282ebefe270ddf2a1ded71f7814f6ff6924dc19b4d953e2ee1df021e078dc219c806973e27f4f7", 0x98}, {&(0x7f0000000240)="9d64a88defdc9fe2f8414054f51b2ff1042750e9b16cadfa30d875da9e2002a5b5646ab8d2191f2a68527c6629ed3a779429b4c724aabbfe4738be95d8aa35d5f44e02e736dd13aa952185476881bb995f0c321169a89920abd7944d9859022c71cf95472c37a323", 0x68}, {&(0x7f00000003c0)="e7d09a513bef40b1966706d4fd4b0bb90d864f11019c777d37b91c31cb8bb2948b4ec576abd39a217730b820dd581b3c17ceae9c3f", 0x35}, {&(0x7f0000000400)="fa518e8b07e87e97a2e678835cf564b22885b08706b2e156de68d6867b3cdc70645f67809c08e157e0da12c40b23bda526ceba601891bc5ff7f6adeb815c263b2954978499a318b04e7ad102a5628efd423755d037a7f927c9bf388f6945f28e9cd8163c73d6d7d99e18bab4", 0x6c}, {&(0x7f0000000480)="7165426ff4a6b82937f2dad2c8b1267f769b0f13f23fc0e51519b42d09e80ea7d0c949becec1e72b2d8ed4f494286c7e16add86035b7dfb02d9cf4043558e006035a88c0ffd5134740cb4ac8db52805a48c6943d2fe13df5405737126c90d860fa791c693ecc9bc28fa4eda1c460015ca735acc20b6978c10b2a567b10caeb3c2dd68a66a40c9936bbebbc0b3993a0d1a33047520b7005e56dc2207d321b19146ecf3ccada62d514d182fa2ba0c58120e54ae3a31e9a493e7847acb9e51a", 0xbe}], 0x8, 0x0, 0x0, 0x44084}, 0x44081) [ 1205.167925] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000e00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:39 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800007003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1205.302901] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:39 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804007a19000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000f00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1205.447027] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 02:36:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1205.580662] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1205.694617] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1205.708756] EXT4-fs (loop1): inodes count not valid: 458880 vs 128 [ 1205.859380] EXT4-fs (loop1): inodes count not valid: 458880 vs 128 02:36:40 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f00000000c0)=""/14, &(0x7f00000001c0)=0xe) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:40 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x3) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="800000000000000028001a000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2480005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000f601000000000000000076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2480005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="00000000000000000f0000000b000100666c6f77657200001400020008003000fcffff0108002f0000000000316a6f26217b0e0b635098837c9a2ac64f07404e4ee978fc1f8e73c63e1f252dea33caec4016b43430cba9f2c3cba4c579d4a4ccf1312d6495f25e60b36f101cf0ed3acd48512c97a1197951aceab64c39da6e58ebfce1efbc5230bfeafd93d3eaeeb451901460067fb72180769111396b1cdb85da31ed90a2d073d25907f016ebc913fac2a8e0812fb9"], 0x44}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x474, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x40f1b8e6}}, {0x8, 0x6, r2}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x2, 0x2, 0x0, 0x80}, {0x83b7, 0xfc, 0x3b, 0xbe}, {0x5, 0x7, 0x7f, 0x2}, {0x60, 0xe8, 0x6, 0xffffffff}, {0x2, 0x20, 0x0, 0x60000}]}}}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 02:36:40 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80000000380400002d000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000003f00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:40 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800009003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 02:36:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000004000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1206.040063] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1206.059231] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1206.168894] attempt to access beyond end of device [ 1206.173862] loop2: rw=2049, want=6434, limit=52 [ 1206.195751] nla_parse: 25 callbacks suppressed [ 1206.195762] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 02:36:40 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000054000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000004800", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1206.219858] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1206.261838] EXT4-fs (loop1): inodes count not valid: 589952 vs 128 02:36:40 executing program 2: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) lseek(r0, 0x0, 0x3) recvmsg(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/153, 0x99}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000480)=""/190, 0xbe}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000640)=""/164, 0xa4}, {&(0x7f0000000700)=""/97, 0x61}, {&(0x7f0000000ac0)=""/229, 0xe5}, {&(0x7f0000000bc0)=""/94, 0x5e}], 0x9, &(0x7f0000000d00)=""/4096, 0x1000}, 0x10042) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 02:36:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 02:36:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000004c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1206.356323] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1206.393653] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1206.396277] minix_free_inode: bit 1 already cleared 02:36:40 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800410003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1206.454238] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1206.505775] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1206.541356] audit: type=1800 audit(1590028600.793:295): pid=11745 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.stat" dev="sda1" ino=16213 res=0 02:36:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000006000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:40 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000007000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1206.597145] MINIX-fs: mounting unchecked file system, running fsck is recommended 02:36:40 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d", 0x25}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000140)="be75a613518f8b926a3829e3075a179f05deff963b9c0465babb17219c66f3edb5c0d2c83dcdeedaad1c251e4db2e4477c21b32c7cae12037a94ebdfa25d4923a4d9e68cb3257903d46c53a3791f2c77f98dcb53b26787562d15df9a7398e1f5692e00b7bc00a23ac68e494213138a931b5bf152558b0821cea3d33c68ccb3ebd639bee074c31e964483ccf10ece7fc7c5c934f9de6bb4cb4052f5f0298478c26a7d2b2e83d1b09d8027ea6d89ef57d8e338c7eea2272ea3cf188c1e1eea3bbf51ab3564c77b0290387dccce0f5e57034a9f141c4780cdbd02bca1f74ebce0", 0xdf, 0x1}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054ab8", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001"], 0x3}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) lseek(r3, 0x0, 0x3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000300)={r4}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1206.660449] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1206.678183] attempt to access beyond end of device 02:36:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000586500", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1206.716437] loop2: rw=2049, want=6434, limit=52 [ 1206.722103] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1206.777420] EXT4-fs (loop4): bad s_want_extra_isize: 224 [ 1206.810823] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1206.822758] EXT4-fs (loop1): inodes count not valid: 1049728 vs 128 02:36:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000000)=""/141, &(0x7f00000000c0)=""/126, &(0x7f0000000180)=""/65, 0x4000}) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1206.853434] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:41 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x440a00, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv0\x00'}]}, 0x30}}, 0x4) mount$bpf(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x20000180, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1003040, 0x0) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000780)="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", 0x309, 0x34f9}], 0x80, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)="e00e7575ed781848477b6aca1ef88fd56c1d903a31948285d299122687881134afbfa9ce2a80d76684bd1228ea05169d829f7285eaa9c8c8ab260f2774cbc83a383f6f5ad14859b284835e250210d627909becc8241f7ec65d2f7de4bb81ad23c54ffed42fae0bfb6134830e3ffc27e4e75c7359933c04bdbc4a0f74f3b351be5fadfbafebd6563d2a9a66c5880cd6fdcb59b883de0a68347db0c60268dc4bb69c7c2972db1fec4dbe11f0e81f89e075d54f367da1cf0c2a9d7b3aaf3a31a8c30c", 0xc1}) 02:36:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000006800", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:41 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b1e00000000000000000000300000000000000029000000040000000002000000000000c910fe88000000000000000000000000000100000000000080000000000000002900000037000000000c0000000000000740000000000e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000502000005020000c20400000000c9"], 0xc8}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800020003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1206.954502] EXT4-fs (loop4): bad s_want_extra_isize: 224 [ 1206.971451] audit: type=1800 audit(1590028601.223:296): pid=11796 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.stat" dev="sda1" ino=16086 res=0 [ 1206.976822] minix_free_inode: bit 1 already cleared 02:36:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 02:36:41 executing program 4: syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x800000000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0xfffffffffffffe55, 0x403}, {&(0x7f0000000780)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed1960728f2d94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad04de5eae8d6d9ea1a714e35c5c3855f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67ebd46d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272f57349249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0x7, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000c40)=0x401, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="f32638b85b671cbe698b41f1206ae85b2d6234a0c94fd36a720c04f2af6ef721c511f03930bcc85d4a", 0x29}, {&(0x7f0000000200)="63b7443c2aaef3c97be7edb8675a8a3c2f465294109aff564f1ff535749a88e8042973303037f6865d18c82b6c2b31bf3162043a59e12b6cb05082ef868f37ed93fcf7ba00f6301c0a0d501fafe20c6f447eddacd8f6e5e632ef87d3e86db520945c690b6f6ba304f468d011fe95", 0x6e}, {&(0x7f0000000280)="8b0e0bc86b3f46d70b5c27ab4308fd7e07faa29b81f60e3a82b51040b56b41349e7d591a7e2287a57c3a685f1835", 0x2e}, {&(0x7f00000002c0)="bd4ec07f38398ca198bda5c18bf32bbb0306ceef2dd4056e7c89ad3404c031dbb172bcbaeb16f8ab226f8c9add99964459af367563de49067d7571f726bf42ec4af01b2c7570002f424a7864d7855ab9f1071279accf0aadde149fec56fa90e5a3", 0x61}, {&(0x7f0000000340)="ba603ddfb95dca07d555e2a03c9ecf3ae9e77b31269ef2f6c5d254c49c1000cdd4b7ac942179d842db5804c2f6bfe32bafb11ed4c84c19d7b9056ff08b71b506b32f85df2d675e6c44d07e9ad90d315799490d7c7dbb208f334d082e32c9ee62b7006a56059fc731ae843349b5139ad98e591bea83e3d5cf1c0c1845a645cae97ecf7590068917eb16f6e54b4384504447de7cb3c4b394b41a47e068baca04a80a5d50f17c1e17907cae7a1a06dfe25225b127a407f98d5918019f", 0xbb}, {&(0x7f0000000400)="74b9a8fabdcbd28e17159fae3a312fc7bf", 0x11}, {&(0x7f0000000440)="0b78b4039a471b806608ab5f81b90e293034d705c26b0ea16ed5c9e8478f75a8d56bfaae1ce162e63785a5bc29c92bf14a2872636dfea23dc24562290dfc8d11befc4ac4dfe7d5ceb39f9b8b5f560e82610dcfd4897b60dd7064ed903738852f1fc9538b051a33fcc2ed1e242218cb7901f23f3b581dc9687466115083a640e4eb4d3c78c278dba888c2d604bb24211531fa34e516aacc62945bc34264edb907205f8c7a395019b2ada77ae54b905fec71e415ef0f068f4e6e1d7f0026f6552e1ff8808c194ed9a9f2dd06437b806051ecccd37495a1245fc6bd1593c1ea8f3c4dd8c4648bccb0", 0xe7}, {&(0x7f0000000540)="26754b86561a19f7b6068f7c7d468dae41a37db3ff800519f37ed220121eb535d4ca49b6161269c089f5b906894f1fe462c6dea341b4a66b9d361ef80c57032c248a6880c801496d29a070a7d48da23a8c73ac579e315fc7b1209871bfd41973b81ee4f81285bce16bd65ebd806b120c4fd200c2355788de8340cbb03aa2cabb5409bcaca9865f6113cbefdc9f8eb5b3f4309dcee7d626df06de28af175a4d176f880c3d067dc4a5aa068098cebe48c461a63ea40b9c46589827dcdb7c2026306bc30f39a5669b41d965bc15a91e75a4675d11fa427dc13a312ec7c80cfe3efa8e3506", 0xe3}, {&(0x7f0000000640)}], 0x9, &(0x7f0000000ac0)=ANY=[@ANYBLOB="a8000000000000000000000007000000866600000003070d8703f678eaf99352788c95060200078bd5ac8896060875110ba30a6a0110731eaad34e69b8daec1bfa81d7ae676fe801910708a651fc3255c9353720fa05483b77010b061e793ee774be6cd1020e45acd951a97893a39b983254070f06e000000164010100000000008307f00a010100831bd27f000001e00000010a01010064010102ffffffffe00000020000000000"], 0xa8}, 0x4005) r2 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r3 = dup(r1) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000b80)={0x5, 0xc, 0x4, 0x70000, 0x1, {0x77359400}, {0x5, 0x3, 0xff, 0x2, 0x40, 0x7, "3d35a56f"}, 0x1, 0x3, @planes=&(0x7f0000000640)={0x2, 0xfffffffe, @mem_offset=0x7fff, 0x8000}, 0x9, 0x0, r2}) 02:36:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000006c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) 02:36:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x400, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1207.070549] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1207.092131] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 02:36:41 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="80000000380400002d000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 02:36:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1207.197980] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1207.328261] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 55468 [ 1207.359447] EXT4-fs (loop1): inodes count not valid: 2097280 vs 128 02:36:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) lseek(r1, 0x0, 0x3) accept4$inet(r1, 0x0, &(0x7f0000000080), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) lseek(r2, 0x0, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x33, "4ea0b14b6a0b2b42a8f30acdee3a0c44dbe256f6065cd66ae0ac96a441d825907a4a18346e6e8d87acf089eef249f5ab768d2f"}, &(0x7f0000000040)=0x3b) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1207.377996] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1207.395509] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1207.459785] attempt to access beyond end of device 02:36:41 executing program 5: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYBLOB="6ffe0000000000000000030087acd8ac0000580001806bf02d4a9ab1eaa6e6ed473d661daa604b1e05372a3706dee0ae6db4b087cc089a487a9ed3e430b524ab"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000054000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 1207.504570] loop2: rw=2049, want=6434, limit=52 02:36:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170"], 0x44}}, 0x0) [ 1207.546071] Buffer I/O error on dev loop2, logical block 3216, lost async page write [ 1207.605623] ------------[ cut here ]------------ [ 1207.606149] audit: type=1800 audit(1590028601.863:297): pid=11851 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.stat" dev="sda1" ino=15862 res=0 [ 1207.626674] WARNING: CPU: 0 PID: 11847 at fs/inode.c:343 inc_nlink.cold+0x11/0x18 [ 1207.637399] Kernel panic - not syncing: panic_on_warn set ... [ 1207.637399] [ 1207.644802] CPU: 0 PID: 11847 Comm: syz-executor.2 Not tainted 4.19.124-syzkaller #0 [ 1207.652686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.662043] Call Trace: [ 1207.664644] dump_stack+0x1fc/0x2fe [ 1207.668294] panic+0x26a/0x50e [ 1207.671506] ? __warn_printk+0xf3/0xf3 [ 1207.675414] ? inc_nlink.cold+0x11/0x18 [ 1207.679661] ? __probe_kernel_read+0x16c/0x1b0 [ 1207.684257] ? __warn.cold+0x5/0x46 [ 1207.687899] ? inc_nlink.cold+0x11/0x18 [ 1207.691878] __warn.cold+0x20/0x46 [ 1207.695427] ? inc_nlink.cold+0x11/0x18 [ 1207.699409] report_bug+0x262/0x2a0 [ 1207.703049] do_error_trap+0x1d7/0x310 [ 1207.706944] ? math_error+0x310/0x310 [ 1207.710745] ? __irq_work_queue_local+0x101/0x160 [ 1207.715598] ? irq_work_queue+0x2b/0x80 [ 1207.719583] ? wake_up_klogd+0x8c/0xc0 [ 1207.723478] ? trace_hardirqs_off_caller+0x69/0x210 [ 1207.728509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1207.733373] invalid_op+0x14/0x20 [ 1207.736839] RIP: 0010:inc_nlink.cold+0x11/0x18 [ 1207.741425] Code: 51 b9 ff 44 89 e0 5b 5d 41 5c c3 e8 20 ff ee ff eb c3 e8 29 ff ee ff eb 8e e8 02 51 b9 ff 48 c7 c7 80 c9 74 87 e8 2f f6 a4 ff <0f> 0b e9 48 86 ff ff e8 ea 50 b9 ff 48 8d 7b 40 b8 ff ff 37 00 48 [ 1207.762501] RSP: 0018:ffff88803dc17d88 EFLAGS: 00010282 [ 1207.767872] RAX: 0000000000000024 RBX: ffff8880483369a0 RCX: 0000000000000000 [ 1207.775161] RDX: 0000000000000000 RSI: ffffffff81534081 RDI: ffffed1007b82fa3 [ 1207.782434] RBP: 0000000000000000 R08: 0000000000000024 R09: ffffed1015cc5081 [ 1207.789709] R10: ffffed1015cc5080 R11: ffff8880ae628407 R12: ffff8880483369e8 [ 1207.796986] R13: ffff88803b5d4e00 R14: 00000000000000fa R15: 0000000000000000 [ 1207.804282] ? vprintk_func+0x81/0x17e [ 1207.808195] ? inc_nlink.cold+0x11/0x18 [ 1207.812188] minix_mkdir+0x71/0x1b0 [ 1207.815835] ? minix_create+0x30/0x30 [ 1207.819650] ? security_inode_mkdir+0xd9/0x110 [ 1207.824254] vfs_mkdir+0x423/0x6a0 [ 1207.827807] do_mkdirat+0x21e/0x280 [ 1207.831453] ? __ia32_sys_mknod+0xb0/0xb0 [ 1207.835608] ? __se_sys_clock_nanosleep+0x2b0/0x2b0 [ 1207.840634] ? trace_hardirqs_off_caller+0x69/0x210 [ 1207.845666] ? do_syscall_64+0x21/0x620 [ 1207.849657] do_syscall_64+0xf9/0x620 [ 1207.853488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1207.858683] RIP: 0033:0x45ca29 [ 1207.861883] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1207.880789] RSP: 002b:00007fda07766c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1207.888506] RAX: ffffffffffffffda RBX: 00000000004f5b40 RCX: 000000000045ca29 [ 1207.895781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1207.903067] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.910368] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1207.917648] R13: 0000000000000734 R14: 00000000004c2500 R15: 00007fda077676d4 [ 1207.926662] Kernel Offset: disabled [ 1207.930375] Rebooting in 86400 seconds..